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INTEGRATED BUSINESS SYSTEM FOR WEB BASED 
TELECOMMUNICATIONS MANAGEMENT 

The present invention relates generally to 
5 method of doing business over the public Internet, 

and, particularly, to providing enterprise management 
tools to customers of a telecommunications service 
provider over the Internet. 

The public Internet was created as ARPANET, 

10 an initiative of the Defense Advanced Research 

Projects Agency (DARPA) to connect computers for the 
exchange of data, and to enable command and control 
functions to be exchanged in case of a nuclear war. 
In the 1970s, it was split into military and civilian 

15 networks, with the civilian network managed by the 
National Science Foundation (NSF) . In the early 
19 80s, the Secretary of Defense mandated the TCP/IP 
network protocol, and the NSF gradually turned control 
of what was now referred to as the public Internet to 

20 universities, independent agencies and commercial 

service providers. During this time, the Internet was 
used primarily for scientific and academic purposes. 
With the adoption of HTML and the development of 
graphical browsers, the public Internet began to shift 

25 from a technical character set form of communication, 
to a delivery medium for all types of content over the 
World Wide Web (Web) and commercial enterprises 
entered this segment of the Internet to do business 
over the rapidly developing Web environment. Initial 

30 methods of aoing business were focused on using the 

Web as an alternate to existing direct mail, magazine 
or television methods of doing business, in which 
goods were advertised and sola, or content was 
delivered via the Web in a manner similar to existing 

35 methods of doing business. 

During this same period of time, the 
telecommunications industry began to provide a greater 

Percentage of the Internet capacity, both in terms of 
igh speed lines between web sites, and between the 
40 individual consumers and small business who connect to 
the Web through a local telephone Central Office (CO) 
and an Internet service provider. 

Simultaneously, the telecommunications 
industry recognized that its larger customer were 
45 interested in managing portions of their own business 

Erovided by the telecommunications enterprise, and 
egan to make some of their management tools available 
to their customers. In these conventional customer 
enabled management systems, a connection was made 
50 with a large legacy system via a dial-up connection 
from a customer owned personal computer or work 
station. This connection frequently, although not 
always, emulated a terminal addressable by the legacy 
system. The dial-up access required custom software 
55 on the customer workstation to provide dial-up 

services, communication services, emulation and/or 
translation services and generally some resident 
custom form of the legacy application to interface 
with the mid range or mam frame computer running the 
60 legacy system. 

There were several problems associated with 
this approach: 

First, the aforementioned software is very 
hardware specific, and customers generally have a wide 
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range of workstation vendors, which required an 
extensive inventory of software for distribution, and 
generally, intensive customer hand holding through 
initial setup and installation before reliable and 
5 secure sessions were possible. If the customer 

hardware platform changed through an upgrade, most of 
these issues needed renegotiation. 

Secondly, dial-up, modem, and communications 
software interact with each other in many ways which 

10 are not always predictable to a custom application, 

which required extensive trouble shooting and problem 
solving capacity for an enterprise wishing to make the 
legacy system available to the customer, particularly 
where various telephone exchanges, dialing standards 

15 or signal standards were involved. 

Third, when an enterprise wished to make 
more than one system available to the customer, the 
custom application for one legacy system was not able 
to connect to a different legacy system, and the 

20 customer had to logoff and logon to switch from one to 
the other. The delivery technology used by the two 
legacy systems was frequently different, which 
required different interface standards. 

Finally, the security and entitlement 

25 features of the various legacy systems were frequently 
quite different, and varied from system to system and 
platform to platform. 

In the context of telecommunications 
services and products offered by large 

30 telecomunications network service providers for their 
customers, the assignee of the present invention, MCI, 
has deployed an MCI ServiceView ( "MSV" ) platform 
comprising a number of independent legacy systems 
enabling dial-up connectivity for those customers 

35 desiring to obtain the following network management 
service and reporting data pertaining to their 
telecommunications networks: priced call detail data 
and reporting; toll-free network manager "800NM" call 
routing data; outbound network management data; 

40 trouble ticket information; fault manager alarms. 
Limited interactive toll free network control is 
additionally supported whereby customers may change 
the configuration of their toll-free networks and 
"virtual" networks, i.e., Vnet networks. In addition 

45 to the MSV platform, the present assignee has 

implemented a variety of stand alone applications 
including: a Traffic View system enabling customers to 
perform real-time network traffic monitoring of their 
toll-free networks, and obtain near -real time call 

50 detail data and reports, and, a "Hyperscope" reporting 
system for providing reports on the performance of 
customers' Broadband (data) networks. 

More particularly, MCI's ServiceView 
platform ("MSV") provides for the generation of Toll- 

55 free Network Management data, priced call detail 

("Perspective") data for usage analysis and trending, 
each of which requires a different reporting mechanism 
due to the nature of the data being presented. Such 
reporting systems typically do not provide any report 

60 customization or presentation options for the 

customer, and any reporting customization is provided 
by an application specific program running on the 
client workstation. Furthermore, such systems do not 
readily provide for the scheduling of periodic or ad 

65 hoc "one -shot" reports. 
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AT&T provides a "Customer Direct" offering, 
a first part of which is known as the Network 
Administration System (NAS) , and is developing a 
second part, known as Service Request System (SRS) . 
5 The NAS program uses a personal computer, a Windows 
based GUI and analog dial-up access at 9.6 Kbps to 
AT&T's legacy network switch control systems. When 
completed, the SRS offering will use the same type of 
dial-up platform and enable an AT&T customer to order 
10 services and features from their desk -top personal 
computer . 

Sprint provides several legacy systems via 
the Insite service offerings, including Insite PC, 
Insite ACT and is in the process of developing the 

15 Sprint Insite Executive network management program, 

all making use of a customers personal computer and a 
dial-up connection. Sprint also announced on 
September 17, 199 6, the Sprint InTouch(SM) product 
which would enable a customer to open, view, note or 

20 close trouble tickets. 

These prior art systems, with the excepting 
of InTouch(SM) all suffer from the aforementioned 
problems with dial-up telephone connections and legacy 
applications. Thus, what is needed is a comprehensive 

25 system that provides customers with simplified access 
to a telecommunications provider's products and 
services that they have subscribed. 

The assignee of the present invention has 
realized that the popularity of the public Internet 

30 provides a measure of platform independence for the 
customer, as the customer can run their own Internet 
web -browser and utilize their own platform connection 
to the Internet to enable service. This resolves many 
of the platform hardware and connectivity issues in 

35 the customers favor, and lets the customer choose 

their own platform and operating system. Web -based 
programs can minimize the need for training and 
support since they utilize existing client software 
which the user has already installed and already knows 

40 how to use, i.e., the browser. Further, if the 

customer later changes that platform, then, as soon as 
the new platform is Internet enabled, service is 
restored to the customer. The connectivity and 
communications software burden is thus resolved in 

45 favor of standard and readily available hardware and 
the browser and dialup software used by the public 
Internet connection . 

An Internet delivered paradigm obviates many 
of the installation and configuration problems 

50 involved with initial setup and configuration of a 

customer workstation, since the custom application 
required to interface with the legacy system can be 
delivered via the public Internet and run within a 
standard web-browser, reducing application 

55 compatibility issues to browser compatibility issues. 

The assignee of the present invention has 
also realized that the use of off-the-shelf web 
browsers by the customer significantly simplifies the 
enterprise burden by limiting the client development 

60 side to screen layouts and data presentation tools 
that use a common interface enabled by the web 
browser. Software development and support resources 
are thus available for the delivery of the enterprise 
legacy services and are not consumed by a need for 

65 customer support at the work station level. 
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The assignee of the present invention has 
also realized that providing its management tools to 
its customers will develop customer loyalty, and more 
fully integrate the services provided by the 
5 telecommunications enterprise with the infrastructure 

of the customers organization. It is therefore highly 
desirable to provide these management tools over the 
public Internet. The public Internet provides access 
connectivity world wide via the TCP/IP protocol, 

10 without need to navigate various disparate security 
protocols, telephone exchanges, dialing standards or 
signal standards, thereby providing a measure of 
platform independence for the customer. 

Furthermore, an Intranet/Internet/Web -based 

15 reporting system provides a common GUI for the 

customer enabling both report requesting, customizing, 
scheduling and viewing of various types of data from 
different back-end telecommunications service and 
applications at a single point of customer contact. 

20 It is therefore desired to enable convenient 

customer access to an enterprise's management tools to 
facilitate the integration of the customer with the 
enterprise. This may be done by enabling access to 
the enterprise's telecommunications network management 

25 services over the public Internet. The assignee of 
the present invention currently provides a number of 
independent legacy or host systems to provide 
customers with the following pertaining to their 
telecommunications networks: Priced Reporting 

30 (formerly Perspective) , for priced call data and 

reporting, and TrafficView for unpriced call detail 
data and reporting; Toll -Free Network Management 
(TFNM) (previously 800 Network Manager) , Call Manager, 
and Outbound Network Manager for command and control 

35 of network switching; BroadbandView, Broadband SNMP 

(previously HyperScope) and Event Monitor (previously 
Fault Manager) for network performance and alarm data; 
Service Inquiry (preiously Direct Dispatch) for trouble 
ticket management; Real-Time Monitor for near real 

40 time call detail data; ClientView for invoice data. 
Limited interactive toll free network control is 
additionally supported whereby customers may change 
the configuration of their toll-free networks and 
"virtual" networks, i.e., Vnet networks. 

45 The present invention is directed to a Web- 

based system for doing business that utilizes an 
integrated customer interface system for 
telecommunications network management. The customer 
interface system is provided with a graphical user 

50 interface for enabling a user to interact with one or 
more telecommunications services provided by remote 
servers located in a telecommunications service 
provider's Intranet, and utilizes a Web paradigm to 
allow an easy and convenient single point of access to 

55 all of the telecommunications services provided by the 
enterprise to the customer. While the present 
invention is useful for a wide range of commercial 
activity, ranging from a few thousand calls or 
transactions a month to over a million per month", it 

60 is particularly desirable for activity ranging from 
20,000 to 200,000 transactions or calls per month. 

In the preferred embodiment, the 
telecommunications products and services delivered to 
a client workstation having the integrated customer 

65 interface include: 1) report requestor, report viewer, 
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and report management applications enabling a customer 
to request, specify, customize and schedule delivery 
of reports pertaining to customer's real time 
"unpriced" call detail data and priced call detail 
5 data; 2) centralized inbox system for providing on- 
line reporting, presentation, and notifications to a 
client workstation from one or more Intranet 
application services over an Internet/Intranet 
network; 3) a real-time monitoring system enabling a 

10 customer to monitor call detail statistics and call 
detail data pertaining to their special service 
network usage, e.g., 800/8xx toll-free networks; 4) a 
toll-free network management system enabling customers 
to define their own 800/8xx toll free number routing 

15 plans via the Web/Internet, enabling customers to 
change and modify their existing 800/8xx toll free 
number routing plans, and, temporarily change the 
percent allocation of traffic for a particular 800/8xx 
toll free number based on certain criteria; 5) an 

20 outbound network management system enabling customers 
to manage and track features and services associated 
with their virtual networks ("Vnet") including 
management of calling party number orders, dialing 
plan orders, calling card number management, and ID 

25 code sets orders; 6) an event monitor system for 

providing customers with various reports and real-time 
alarm information relating to their switched- circuit 
(data and voice) networks in real time or near-real 
time, including: provision of physical and logical 

30 views of customers' Broadband data networks, physical 
and logical view of Broadband network alarms, and 
physical and logical performance information relating 
to the circuits which comprise a customer's Broadband 
data network, e.g., frame-relay, thus, allowing 

35 customers to make informed network management 
decisions in controlling their business 
telecommunications networks; 7) a trouble ticket tool 
enabling a customer to open and monitor trouble 
tickets relating to network events on an enterprise 

40 network; 8) a Web-based invoice reporting system 

allowing the customers access to their billing and 
invoice reports associated with network services 
provided to a customer; 9) a web -based call manager 
service enabling call center customers to control 

45 delivery of toll free calls from the 

telecommunications enterprise network to call centers, 
including call centers having multiple automatic call 
distributors (ACD's); 10) an Internet "online" order 
entry and administration service to enable customers 

50 to manage their telecommunications accounts; and, 11) 

a system for handling security and authentication 
requests from both client and server side of the 
applications implementing the suite of telecom 
products and services, and 12) an on-line E-Billing 

55 electronic commerce tool that will allow selected 

networkMCI Interact customers to receive, analyze, and 
pay their invoice (s) over the public Internet. On- 
Line E-Billing provides a variety of Internet -based 
billing features that includes electronic invoice 

60 presentment, invoice analysis and electronic bill 
payment, all from a single point of customer 
authentication . 

Integrated within the customer interface system 
is an application backplane unit for controlling and 



WO 99/15979 r_ PCT/US98/20170 



managing the overall user interface system to a number 
of Web enabled application services. By invoking the 
backplane unit a user may receive a number of 
disparate services available from the remote servers. 
5 Each remote telecommunications service provided 

includes its own user interface unit, referred to as a 
client application, independently implemented of one 
another and the backplane. Although the client 
applications are independently developed as separate 

10 modules, the interface of the present invention 

integrates the client applications into one unified 
system, allowing users to access the individual client 
applications via the backplane unit. Thus, the 
present invention provides interoperability between 

15 each of the client applications and the backplane, as 
well as among each of the client applications. 

Accordingly, the present invention provides an 
integrated customer interface and web -based delivery 
system for delivering to customers a number of telecom 

20 products and services available from remote servers, 
wherein separate client applications may communicate 
with one another and with the backplane unit. 

Thus, in accordance with the principles of the 
invention, there is provided an integrated system for 

25 conducting business over the Internet by providing one 
or more enterprise management tools to the enterprise 
customers, said management tools accessible from a 
client workstation employing a client browser 
associated with a customer and capable of receiving 

30 web pages from the enterprise which enable access to 

the enterprise management tools. This method of doing 
business is accomplished with one or more secure web 
servers which manage one or more secure client 
sessions over the Internet, each web server supporting 

35 secure communications with the client workstation; a 
web page backplane application capable of launching 
one or more management tool applications used by the 
enterprise. Each of the management tool applications 
provide a customer interface integrated within said 

40 web page which enables interactive Web/Internet based 
communications with the web servers; each web server 
supports communication of messages entered via the 
integrated customer interface to one or more remote 
enterprise management tool application servers which 

45 interact with the enterprise management tool 

applications to provide associated management 
capabilities to the customer. 

The messages include: 

i) requests for information pertaining to a 
50 customer's telecommunications business with the 

enterprise; or, 

ii) command and control directives for 
modifying a customer's telecommunications network 
assets; 

55 wherein the remote telecommunications 

management tool application server processes said 
requests or directives and provides responses to~ said 
one or more web servers for secure downloading to the 
customer workstation for display via said integrated 

60 interface. 

Advantageously, this method of doing business 
obviates many of the installation and configuration 
problems involved with initial setup and configuration 
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of a dial-up customer workstation, since the custom 
application required to interface with the legacy 
system can be delivered via the public Internet and 
run within a standard web -browser, reducing 
5 application compatibility issues to browser 

compatibility issues . 

The present invention further enables access to 
legacy management tools used by enterprise management 
in the conduct of the enterprise business to the 

10 enterprise customer, to enable the customer to more 
effectively manage the business conducted by the 
customer through the enterprise, this access being 
provided over the public Internet. 

The present invention provides a single point 

15 of access for the customer to open a plurality of 

disparate enterprise management tools, and to allow 
the customer to thereafter modify their own 
authorization and entitlements to these management 
tools, and be automatically billed for the changes 

20 they have requested. 

The present invention also provides an 
integrated E-Billing system for doing business in 
which customers may view unpriced and priced 
telecommunication call data, to view electronically 

25 generated invoices for the telecommunication service 
provided, and to pay for these services with an E- 
Billing electronic fund transfer. 

The present invention also uses the Internet to 
deliver additional value for networkMCI One customers 

30 and to leverage the web technology of the present 

invention by giving customers the option of receiving, 
analyzing, and paying their networkMCI One invoice 
over the public Internet. The present invention 
provides an "intelligent, navigable invoice" where 

35 customers and users can drill down from summary level 
information to specific site and service level detail. 

This invention further provides enterprise -wide 
customer operations via the Internet and create a 
cost-effective, 24 hour a day, 7 day a week virtual 

40 communications center for the enterprise customers, 
thereby providing a competitive advantages for 
business users of the invention. Using the present 
invention, customers can easily and conveniently 
manage enterprise -wide and individual telecom services 

45 - anywhere, anytime and online. Whether the customer 
has dedicated lines or dial access lines, command and 
control of critical telecom functions is only a 
mouse -click away. This provides a substantial cost 
and time savings to the customer of the enterprise. 

50 The present invention provides a suite of 

Web -based communications management tools that enable 
customers to monitor, analyze and redirect voice, data 
and Internet resources . The invention provides new 
command and control tools for enterprise-wide and 

55 personal communications include: traffic monitoring 
and reporting and service configuration, electronic 
billing and reporting, universal messaging, order- 
entry and provisioning, product and service training, 
and customer care. 

60 Further, the present invention defines a new 

business model by utilizing the Internet as a medium 
for operating and managing mission- critical 
communications operations, by creating a more 
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convenient way for customers to order, provision, 
monitor, report, purchase and pay for their services. 

Still further, the present invention stream- 
lines the enterprise front -and back-office processes 
5 to more effectively serve customers of the enterprise. 
Because customers nave the option to self -serve their 
business functions online, the enterprise sales 
resources are able to play a more consultative role 
and respond to communications conditions that require 

10 more complex management. 

The present invention integrates the tools and 
resources from the enterprise's core long distance, 
local, data, Internet, call center and global 
businesses. This approach leverages the enterprise's 

15 Internet expertise, harnesses the power of the 

enterprise intelligent network, and utilizes the 
enterprise's unique integration capabilities - at the 
network, billing, product and service levels - for the 
benefit of its customers as well as the enterprise. 

20 The components of the present invention 

include: Traffic Monitoring and Reporting - as part of 
networkMCI Interact, customers can monitor and route 
long distance, local, data and Internet traffic, 
including service configuration and setting event 

25 alarms; universal Messaging - integrated messaging; 

allows users to maintain personal profiles under the 
networkMCI Contact service; Order Entry and 
Provisioning - wherein customers can order new 
products online and provision services online; 

30 Customer Care - online support for MCI product and 
services, utilizing networkMCI Click 1 nConnect , Web 
Callback, E-mail support and Service Inquiry, 
Click 1 nConnect being a service that allows Web- users 
to make a PC -to -phone connection over the Internet; E- 

35 Billing and Reporting, which allows customers to 
receive electronic invoices and reports, to remit 
payment electronically; and to provide custom views 
and analysis of billing records; networkMCI 
BroadbandView, a Web -based traffic and reporting tool 

40 for data customers will be integrated under the 

Interact traffic monitoring and reporting portfolio; 
and networkMCI Contact, a service that allows 
end-users to manage their paging, E-mail, voice mail 
and fax as part of the personal profiles management 

45 component of the present invention. 

By utilizing the present invention, customers 
are able to react to emergency situations quickly. 
For example, a telecom director - responsible for 
managing enterprise -wide communications for a packaged 

50 goods company - receives . an 'alarm 1 on his pager at 11 
o'clock at night. A snowstorm in the Northeast has 
paralyzed the city where the company 

operates a 24 hour a day x 7 days a week call center. 
The telecom director powers up his laptop computer 

55 from home, logs on to the MCI Web site, enters his 

authentication passcode for security, and with several 
clicks of a mouse, reroutes traffic to the company's 
call center in Phoenix. For the next 3 6 hours, he is 
able to monitor the call routing situation via the Web 

60 site in real-time, and when the snow clears, he routes 
the traffic back to the Northeast center. 

In a second example, a communications manager 
working for a U.S. -based software company, is 
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responsible for the telecom needs of 50 offices 
worldwide. The manager is responsible for sorting and 
tracking expenses for all 50 locations and for all the 
company's services. The paper invoices can sometimes 
5 exceed hundreds of pages. With electronic billing - 
the manager will no longer have to wait to receive a 
paper invoice in the mail. Instead, real-time e-bills 
will be available on a secure Web site, with the 
ability to manipulate and view the data in many 

10 different formats - by service, by location, etc. 

After review, the manager is able to remit invoices 
electronically . 

The present invention uses Java technology to 
optimize computing resources and network bandwidth and 

15 deliver information to the user desktop quickly and 

efficiently. An enterprise customers is able to 
access the same up-to-date information from a dial-up 
connection at his or her home that would be available 
via a dedicated LAN /WAN environment at their office, 

20 independent of their operating systems. Intelligent 
authentication provides security as well as custom 
information that is delivered to a customer's 
personalized Webtop - eliminating the need for 
customers to cut through clutter to find the 

25 information needed. 

Further features and advantages of the 
invention will become more readily apparent from a 
consideration of the following detailed description 
set forth with reference to the accompanying drawings, 

30 which specify and show preferred embodiments of the 
invention, wherein like elements are designated by 
identical references throughout the drawings; and in 
which: 

Figure 1 illustrates the software architecture 
35 component comprising a three-tiered structure; 

Figure 2 is a diagrammatic overview of the 
software architecture of the networkMCI Interact 
system; 

Figure 3 is an illustrative example of a 
40 backplane architecture schematic; 

Figure 4 depicts the logon process for the nMCI 
Interact system; 

Figures 5(a) and 5(b) illustrate example nMCI 
Interact system web home pages presenting customer- 
45 selectable telecommunications network services in 

which the client/customer is entitled; 

Figure 6 is a flow diagram illustrating the 
backplane logic process when a user selects a service; 

Figure 7 illustrates an architectural overview 
50 of the StarOE order entry component of the nMCI 
Interact system; 

Figure 7 (a) is a diagram depicting the 
execution of a transaction by the Service Inquiry 
application server with each bubble representing a 
55 separate thread. 

Figure 8 is an input process flow diagram, 
illustrating inputs to the StarOE order entry 
component or the nMCI Interact system; 

Figure 9 is an output process flow diagram, 
60 illustrating outputs from the StarOE order entry 
component of the nMCI Interact system; 
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Figure 10 is a block diagram depicting the 
physical architecture of the StarWRS component of 
networkMCI Interact Reporting system; 

Figures 11(a) - 11(c) illustrate flow diagrams 
5 depicting the report request/scheduling process 600 
implemented by StarWRS Report Manager and Report 
Requestor tools of the invention; 

Figures 12 (a) -12(h) illustrate various examples 
of report requestor screen dialogs enabling user 
10 customization of report requests. 

Figure 13 (a) illustrates an example browser 
based message center screen dialog; 

Figure 13 (b) illustrates an example report 
viewer dialog box used for requesting vxew of 
15 available generated reports; 

Figure 14 (a) illustrates the primary components 
implemented in the StarODS priced reporting component 
400; 

Figure 14 (b) depicts generally the process 
20 performed by the DSS in fulfilling a priced reporting 
request received from StarWRS; 

Figures 15 (a) -15(c) illustrate the end-to-end 
process 600 for fulfilling priced call detail data 
report request; 

25 Figure 16 illustrates an example screen display 

when the StarOE application is launched; 

Figure 17 is a sample StarOE screen 1540 for 
adding and modifying reporting options which are used 
by the StarWRS; 

30 Figure 18 illustrates the unpriced call detail 

reporting and real-time traffic monitoring component 
50D for nMCI Interact system; 

Figure 19 is an general flow diagram of the 
process by which the TVS server 550 gets data. 

35 Figure 20 is a detailed flow diagram depicting 

the internal TVS server processes for receiving 
customer TVS enablement data from order entry and CORE 
systems ; 

Figure 21 is a high-level diagram depicting TCR 
40 data flow between processes internal to the TVS 
server; Figure 22 is a high-level flow diagram 
depicting TVS unpriced call detail data report 
generation process; 

Figures 23 (a) -23(b) illustrate flow charts 
45 describing the real-time monitoring process of the 
invention. 

Figure 24 illustrates the particular 
methodology employed for periodically updating a Web 
page with updated statistical data. 
50 Figure 25(a) illustrates the high-level design 

of the Service Inquiry application 2200; 

Figure 25 (b) illustrates the Service Inquiry 
application Server 2300 interfacing with the Legacy 
Backend 40(a), CSM/SI through Requester and Receiver 
55 objects; 

Figures 25(c) -25(1) illustrate examples of SI 
application dialog windows enabling user creation and 
querying of trouble tickets; 
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Figure 25 (m) illustrates domain object model 
(DOM) 2 60 0 implemented in Service Inquiry; 

Figure 26 is a general block diagram depicting 
the physical architecture of the TFNM system 
5 components; 

Figures 27 (a) -27(c) illustrate exemplary 
screens providing TFNM functionality through option 
menus ; 

Figure 27 (d) illustrates an example display 
10 when the File/Select Corp ID menu option of Figure 
27 (a) is selected; 

Figure 27 (e) illustrates an exemplar screen 
display depicting a hierarchical tree view of an 
example toll-free number routing plan; 
15 Figure 27(f) illustrates an example IMPL dialog 

screen enabling the user to generate a TEMP IMPL/IMPL 
order for a desired Corp Id; 

Figure 27 (g) illustrates an example QUIK dialog 
screen enabling the user to generate a TEMP QUIK/QUIK 
20 order for a desired Corp Id; 

Figure 27 (h) illustrates an exemplar screen 
display showing the results of an order query; 

Figure 27 (i) illustrates an exemplary screen 
display showing the options for changing existing 
25 network plan routing orders. 

Figure 2 8 is a block diagram depicting the 
physical architecture of the ONM system 200 of the 
invention; 

Figures 29 (a) -29 (p) illustrate various examples 
30 of ONM web page screen dialogs enabling user 

interaction with Outbound Network management system. 

Figure 3 0 is a detailed block diagram depicting 
the physical architecture of the Broadband reporting 
system component of the present invention; 
35 Figure 31 illustrates those components utilized 

for Broadband performance reporting; 

Figures 32 (a) -32(b) illustrate the flow 
diagrams depicting the Broadband system report 
creation process 300; 
40 Figure 33 illustrates a process flow diagram 

depicting various Broadband reporting data retrieval 
process ; 

Figures 34(a) - 34(g) depict example graphic 
reports relating to a customer's Frame Relay 
45 (Broadband) network; 

Figures 35 (a) -35(b) illustrate two example 
views presented by the Broadband map viewer; 

Figure 3 6 is a block diagram illustrating an 
overview of the event monitor component of the nMCI 
50 Interact System; 

Figure 3 7 illustrates an example of a back-end 
configuration for the fault management system; 

Figure 38 illustrates an architectural view of 
a fault management host; 
55 Figure 39 is a high level logic flowchart 

depicting the operation of the event monitor component 
of the nMCI Interact System; 

Figure 40 illustrates a high level overview of 
the call manager system environment; 
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Figure 41 illustrates call manager webstation 
component architecture of the nMCI Interact system, 
showing interconnections among the components; 

Figure 42 illustrates the objects making up the 
5 client interface code, in one embodiment of the call 
manager system; 

Figure 43 illustrates one embodiment of the 
software architecture showing communications between 
the client 20 and the call manager web server 1132 and 
10 its components; 

Figure 44 illustrates an example of call 
manager webstation application physical architecture 
when one or more call manager web servers 113 2 bypass 
the CMIDS component 114 0; 
15 Figure 4 5 is an example of a CMIDS conceptual 

model 1140 providing details of the CMIDS software 
components ; 

Figure 46 illustrates a back-end process flow 
for the call manager system component of the present 
20 invention; 

Figure 47 illustrates an application- level 
process flow 1250 for the call manager system 
component of the present invention; 

Figure 48 illustrates an example of a call 
25 manager webstation application screen including the 
toolbar and the route writing palette; 

Figure 49 shows an example of a system status 
display; 

Figure 50 illustrates an example of a ACD 
30 collector administration function screen displayed for 
providing the user with the ability to view, create, 
delete and edit ACD collectors; 

Figure 51 illustrates an architectural 
schematic of the online invoicing system 1300 
35 component of nMCI Interact; 

Figure 52 is a flow diagram illustrating an 
online invoicing process flow; 

Figure 53 (a) is a sample criteria screen 
launched from the nMCI Interact home page; 
40 Figure 53 (b) is a sample screen displaying a 

list of invoice reports; 

Figure 54 is a sample screen displaying an 
invoice document generated by the online invoicing 
system component of the invention; 
45 Figure 55 is a flow diagram illustrating an 

online invoicing back-end server process flow 1400 
during document indexing and storing; 

Figure 56 is a flow diagram illustrating an 
online invoicing back-end server process flow when 
50 responding to client requests for document 
presentation; 

Figure 57 is a schematic illustration of the 
message format passed from the user workstation 2 0 to 
the secure web server 24 over the public internet; 
55 Figure 58 is a data flow diagram illustrating 

the present invention's process flow during logon, 
entitlement request /response, heartbeat transmissions 
and logoff procedures; and 
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Figure 59 is a data flow diagram for various 
transactions communicated in the system of the present 
invention . 

Figure 60 is a diagram depicting the physical 
5 network architecture of the nMCI Interact system of 
the present invention; 

Figures 61 (a) is a schematic illustration 
showing the message format passed between the 
Dispatcher server and the application specific proxy. 

10 " Figures 61 (b) is a schematic illustration of 

the message format passed between the application 
specific proxy back to the Dispatcher server. 

The present invention is a Web -based, 
telecommunications network application delivery system 

15 for delivering an integrated suite of customer network 
management tools to customers of telecommunications 
service providers using a Web browser paradigm. The 
integrated suite of customer network management tools 
described herein and provided by the assignee of the 

20 present invention, is collectively referred to as the 
networkMCI Interact system ("nMCI Interact")- Such an 
integrated suite of Web-based interactive applications 
provides all of the tools necessary to enable 
customers to manage their telecommunication assets, 

25 quickly and securely, from anywhere in the world. 

The nMCI Interact system architecture is 
basically organized as a set of common components 
comprising the following: 

1) a software architecture detailing the client 
30 and server based aspect of nMCI Interact; 

2) a network architecture defining the physical 
network needed to satisfy the security and data volume 
requirements of the networkMCI System; 

3) a data architecture detailing the back-end 
35 or data sources for the networkMCI reporting system; 

and 

4) an infrastructure covering security, order 
entry, fulfillment, billing, self -monitoring, metrics 
and support. Each of these common component areas 

40 will be discussed in further detail herein. 

Figure 1 is a diagrammatic illustration of the 
software architecture in which the present invention 
functions. A first tier of software services are 
resident on a customer work station 2 0 and provides 

45 customer access to the enterprise system, having one 
or more downloadable application objects 10 directed 
to front end business logic and application services, 
a backplane service layer 12 for managing sessions, 
one or more presentation services objects for the 

50 presentation of telecom network management options and 
customer requested telecommunications network 
management data in a browser recognizable format, and 
a customer supplied browser for presentation of 
customer options and data to the customer and for 

55 internet communications over the public Internet. 

A second or middle tier 16 is provided, having 
secure web servers and back end services to provide 
applications that establish user sessions, govern user 
authentication and their entitlements, and communicate 

60 with adaptor programs to simplify the interchange of 
data across the network. 
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A back end or third tier 18 having applications 
directed to legacy back end services includes database 
storage and retrieval systems and one or more database 
servers for accessing system resources from one or 
5 more legacy systems. 

Generally, the customer or client tier or 
workstation 2 0 is client software capable of providing 
a platform- independent , browser -based, consistent user 
interface implementing objects programmed to provide a 

10 reusable and common GUI abstraction and problem- domain 
abstractions. More specifically, the client- tier 
software is created and distributed as a set of Java 
classes including the applet classes to provide an 
industrial strength, ob^ ect - oriented environment over 

15 the Internet. Application- specif ic classes are 
designed to support the functionality and server 
interfaces for each application with the functionality 
delivered through the system being of two -types: 1) 
cross-product, for example, inbox and reporting 

20 functions, and 2) product specific, for example, 

Service Inquiry, Toll Free Network Management ( "TFNM" ) 
or Call Manager ( "CM" ) functions. The system is 
capable of delivering to customers the functionality 
appropriate to their product mix. 

25 Figure 2 is a diagrammatic illustration of the 

network and platform components of the nMCI Interacts 
system, including: the Customer workstation 20; the 
Demilitarized Zone 17 (DMZ) ; Web Servers cluster 24; 
the MCI Intranet Dispatcher/ Proxy Servers cluster 30; 

30 and the MCI Intranet Application servers 40, 
warehouses, legacy systems, etc. 

The customer workstation 2 0 is browser enabled 
and includes client applications responsible for 
presentation and front -end services. Its functions 

35 include providing a user interface to various MCI 
services and supporting communications with MCI's 
Intranet web server cluster 24. As illustrated in 
Figure 2, the client tier software is responsible for 
presentation services to the customer and generally 

40 includes a web browser 14 and additional object- 
oriented programs residing in the client workstation 
platform 20. The client software is generally 
organized into a component architecture with each 
component generally comprising a specific application, 

45 providing an area of functionality. The applications 
generally are integrated using a "backplane" services 
layer 12 which provides a set of services to the 
application objects which provide the front end 
business logic and manages their launch. 

50 As will be described, each of the nMCI Internet 

suite of network management applications implements a 
set of common objects (CO) that minimizes the 
replication of code, and provides a framework in which 
a family of internet applications may be managed and 

55 created including: communications, I/O services to 
local resources, user authentication, 
internationalization, common look and feel, 
application management, and a model view controller 
(MVC) framework. The primary common object services 

60 for each of the suite of applications include: 

graphical user interface (GUI) ; application launch; 
window navigation among applications; inter - 
application communications; printing; user identity, 
session management, authentication, and entitlements; 
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data import and export; logging and statistics; error 
handling; version management; and messaging services. 

As shown in Figure 2, the aforesaid objects 
5 communicate data by establishing a secure TCP 

messaging session with one of the DMZ networkMCI 
Interact Web servers 24 via an Internet secure 
communications path 22 established, preferably, with a 
secure sockets SSL version of HTTPS . The DMZ 

10 networkMCI Interact Web servers 24 function to decrypt 
the client message, preferably via the SSL 
implementation, and unwrap the session key and verify 
the users session. After establishing that the 
request has come from a valid user and mapping the 

15 request to its associated session, the DMZ Web servers 
24 will re- encrypt the request using symmetric 
encryption and forward it over a second secure socket 
connection 2 3 to the dispatch server 2 6 inside the 
enterprise Intranet . 

20 As will be hereinafter described in greater 

detail, a networkMCI Interact session is designated by 
a logon, successful authentication, followed by use of 
server resources, and logoff. However, the world-wide 
web communications protocol uses HTTP, a stateless 

25 protocol, each HTTP request and reply is a separate 
TCP/IP connection, completely independent of all 
previous or future connections between the same server 
and client. The present invention is implemented with 
a secure version of HTTP such as S-HTTP or HTTPS, and 

30 preferably utilizes the SSL implementation of HTTPS. 
The preferred embodiment uses SSL which provides a 
cipher spec message which provides server 
authentication during a session. The preferred 
embodiment further associates a given HTTPS request 

35 with a logical session which is initiated and tracked 
by a "cookie jar server" 32 to generate a "cookie" 
which is a unique server -generated key that is sent to 
the client along with each reply to a HTTPS request. 
The client holds the cookie and returns it to the 

40 server as part of each subsequent HTTPS request. As 
desired, either the Web servers 24, the cookie jar 
server 32 or the Dispatch Server 26, may maintain the 
"cookie jar" to map these keys to the associated 
session. A separate cookie jar server 32, as 

45 illustrated in Figure 2 has been found desirable to 
minimize the load on the dispatch server 26. A new 
cookie will be generated when the response to the 
HTTPS request is sent to the client. This form of 
session management also functions as an authentication 

50 of each HTTPS request, adding an additional level of 
security to the overall process. 

As illustrated in Figure 2, after one of the 
DMZ Web servers 24 decrypts and verifies the user 
session, it forwards the message through a firewall 

55 25b over a TCP/IP connection 23 to the dispatch server 

26 on a new TCP socket while the original socket 22 
from the browser is blocking, waiting for a response. 
The dispatch server 26 will unwrap an outer protocol 
layer of the message from the DMZ services cluster 24, 

60 and will reencrypt the message with symmetric 

encryption and forward the message to an appropriate 
application proxy via a third TCP/IP socket 27. While 
waiting for the proxy response all three of the 
sockets 22, 23, 27 will be blocking on a receive. 
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Specifically, once the message is decrypted, the 
wrappers are examined to reveal the user and the 
target middle- tier (Intranet application) service for 
the request. A first- level validation is performed, 
5 making sure that the user is entitled to communicate 
with the desired service. The user's entitlements in 
this regard are fetched by the dispatch server 2 6 from 
StarOE server 39 at logon time and cached. 

If the requestor is authorized to communicate 

10 with the target service, the message is forwarded to 
the desired service's proxy. Each application proxy 
is an application specific daemon which resides on a 
specific Intranet server, shown in Figure 2 as a suite 
of mid- range servers 30. Each Intranet application 

15 server of suite 30 is generally responsible for 

providing a specific back-end service requested by the 
client, and, is additionally capable of requesting 
services from other Intranet application servers by 
communicating to the specific proxy associated with 

20 that other application server. Thus, an application 
server not only can offer its browser a client to 
server interface through the proxy, but also may offer 
all its services from its proxy to other application 
servers. In effect, the application servers 

25 requesting service are acting as clients to the 

application servers providing the service. Such 
mechanism increases the security of the overall system 
as well as reducing the number of interfaces. 

The network architecture of Figure 2 may also 

30 include a variety of application specific proxies 
having associated Intranet application servers 
including: a StarOE proxy for the StarOE application 
server 39 for handling authentication order 
entry/billing; an Inbox proxy for the Inbox 

35 application server 31, which functions as a container 
for completed reports, call detail data and marketing 
news messages, a Report Manager Proxy capable of 
communicating with a system- specif ic Report Manager 
server 3 2 for generating, managing and scheduling the 

40 transmission of customized reports including, for 

example: call usage analysis information provided from 
the StarODS server 33; network traffic 

analysis/monitor information provided from the Traffic 
view server 34; virtual data network alarms and 

45 performance reports provided by Broadband server 35; 
trouble tickets for switching, transmission and 
traffic faults provided by Service Inquiry server 36; 
and toll free routing information provided by Toll 
Free Network Manager server 37. 

50 As partially shown in Figure 2, it is 

understood that each Intranet server of suite 3 0 
communicates with one or several consolidated network 
databases which include each customer's network 
management information and data. In the present 

55 invention the Services Inquiry server 3 6 includes 

communication with MCI's Customer Service Management 
legacy platform 40(a) . Such network management and 
customer network data is additionally accessible" by 
authorized MCI management personnel . As shown in 

60 Figure 2, other legacy platforms 40(b), 40(c) and 
40 (d) may also communicate individually with the 
Intranet servers for servicing specific transactions 
initiated at the client browser. The illustrated 
legacy platforms 40 (a) - (d) are illustrative only and 
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it is understood other legacy platforms may be 
integrated into the network architecture illustrated 
in Figure 2 through an intermediate midrange server 
30. 

5 Each of the individual proxies may be 

maintained on the dispatch server 26, the related 
application server, or a separate proxy server 
situated between the dispatch server 26 and the 
midrange server 30. The relevant proxy waits for 

10 requests from an application client running on the 
customer's workstation 20 and then services the 
request, either by handling them internally or 
forwarding them to its associated Intranet application 
server 30. The proxies additionally receive 

15 appropriate responses back from an Intranet 

application server 30. Any data returned from the 
Intranet application server 30 is translated back to 
client format, and returned over the internet to the 
client workstation 20 via the Dispatch Server 26 and 

20 at one of the web servers in the DMZ Services cluster 
24 and a secure sockets connection. When the 
resultant response header and trailing application 
specific data are sent back to the client browser from 
the proxy, the messages will cascade all the way back 

25 to the browser 14 in real time, limited only by the 
transmission latency speed of the network. 

The networkMCI Interact middle tier software 
includes a communications component offering three (3) 
types of data transport mechanisms: 1) Synchronous 

30 which is used for situations in which data will be 
returned by the application server 3 0 quickly; 2) 
Asynchronous which is used for situations in which 
there may be a long delay in application server 3 0 
response; and 3) Bulk transfer which is used for large 

35 data transfers. 

The DMZ Web servers 24 are found in a special 
secure network area set aside from the Intranet to 
prevent potentially hostile customer access. All DMZ 
equipment is physically isolated and firewalled as 

40 illustrated at 25(a), 25(b) from the company Intranet. 
Similarly, the DMZ equipment is firewalled and 
obscured from hostile attacks from the public 
Internet, except for limited web browser access to the 
web servers which are located in the DMZ. The 

45 customer's web browser connects to a web server in the 
DMZ which in turn connects to the Dispatcher server 26 
which acts as a proxy to extract select information 
from the midrange servers 30. A user may not directly 
connect to any enterprise server in the enterprise 

50 intranet, thus ensuring internal company system 
security and integrity. 

The DMZ also isolates the company Intranet from 
the public Internet because the web servers 24 located 
in the DMZ never store or compute actual customer 

55 sensitive data. The web servers only put the data 

into a form suitable for display by the customer's web 
browser. Since the DMZ web servers 24 do not store 
customer data, there is a much smaller chance off any 
customer information being jeopardized in case of a 

60 security breach. 



Client browser application 
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As mentioned, one component of the nMCI 
Interact system is the client -tier software component 
which provides the integrated and unified interface to 
each of the telecommunications network management 
5 services available to a user. As shown in Figure 3, 

the system of the present invention implements an 
"application backplane" 12, a single object which 
keeps track of all the client applications, and which 
has capabilities to start, stop, and provide 

10 references to any one of the client applications. The 
application backplane 12 is typically implemented as a 
Java applet and is launched when a Web page is 
retrieved via URL pointing to the enterprise's Web 
site. The client applications typically comprise of 

15 graphical user interface programs which enable a user 
to interact with one or more Web enabled remote 
services . 

The backplane 12 and the client applications 
use a browser 14 such as the Microsoft Explorer 

20 versions 4.0.1 or higher for an access and 

distribution mechanism. Although the backplane is 
initiated with a browser 14, the client applications 
are generally isolated from the browser in that they 
typically present their user interfaces in a separate 

25 frame, rather than sitting inside a Web page. 

The backplane architecture is implemented with 
several primary classes. These classes include 
COBackPlane, COApp, COAppImpl, COParm. and COAppFrame 
classes. COBackPlane 12 is an application backplane 

30 which launches the applications 54a, 54b, typically 
implemented as COApp. COBackPlane 12 is generally 
implemented as a Java applet and is launched by the 
Web browser 14. This backplane applet is responsible 
for launching and closing the COApps . 

35 When the backplane is implemented as an applet, 

it overrides standard Applet methods init(), start (), 
stopO and run ( ) . In the init() method, the backplane 
applet obtains a COUser user context object. The 
COUser object holds information such as user profile, 

40 applications and their entitlements. The user's 

configuration and application entitlements provided in 
the COUser context are used to construct the 
application toolbar and Inbox applications. When an 
application toolbar icon is clicked, a particular 

45 COApp is launched by launchAppO method. The launched 
application then may use the backplane for inter - 
application communications, including retrieving Inbox 
data. 

The COBackPlane 12 includes methods for 
50 providing a reference to a particular COApp, for 

mteroperation. For example, the COBackPlane class 
provides a getAppO method which returns references to 
application objects by name. Once retrieved in this 
manner, the application object's public interface may 
55 be used directly. 

COApp is the base interface for the 
applications. The applications, e.g., Service Inquiry 
54a or Call Manager 54b, generally have their startup 
code and inter- application interface in a class which 
60 implements COApp. Generally, two classes are 

available for the applications, COAppImpl or COApplet. 
Alternatively, they may provide their own 
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implementation of the interface. In the preferred 
embodiment, applications typically extend COAppImpl . 

COAppImpl is an "applet - like" class, but it 
does not derive from j ava . applet .Applet nor from 
5 j ava . awt . Panel . By not deriving from Applet, the 
applications may be launched at any time without 
browser having to be pointed to specific page, and 
frees the applications from running within the browser 
frame. Classes derived from COAppImpl are created, 

10 launched, stopped, and destroyed by the COBackPlane 

12. This provides a tight and controlled integration 
by the system of the present invention. 

The COApplet class, on the other hand, extends 
the Applet class and is intended to be launched by the 

15 browser from an HTML <Applet> tag. Extension from 
Applet is provided for applications needing more 
isolation from the present integrated system, or 
requiring a separate browser -based display space. The 
COApplet class implements most of the COApp interface 

20 by forwarding it to a contained COAppImpl object. 

COAppFrame 56a, 56b is a desktop window created 
and used by a COApp to contain its user interface. 
The COAppFrame 56a, 56b is a separate window from the 
Web browser 50. Generally, the COAppFrame 5 6a, 5 6b 

25 has a menu, toolbar, and status bar. The 

COAppFrame 's attachToViewArea ( ) method may be used to 
paste a COView object 60a, 60b, 6 0c into a COAppFrame 
56a, 56b. The COView class is an extension of 
j ava . awt . Panel . It provides a general purpose display 

30 space and container for an application's visual 

representation. Application classes typically extend 
the COView class to implement their presentation 
logic. COApp may use none, one, or many COAppFrames 
56a, 56b. 

35 COParm is a generic data class used to pass 

parameters between applications. COApp interface 
provides a public method for passing COParm message 
objects, for example, public void processMessage 
(COParm message) , which may be used to pass messages 

40 between applications. The COParm class contains a set 
of name -value pairs which are used to present 
information or requests. 



Logon 

45 As illustrated in Figure 4, a logon process for 

the nMCI Interact' s integrated customer interface of 
the present invention starts with the browser launch 
as indicated at step 60, and the entry of the 
enterprise URL, such as HTTPS : //www. enterprise . com, as 

50 indicated at step 62. Following a successful 

connection, an SSL handshake protocol may be initiated 
at this point as indicated at step 63. As will be 
explained in greater detail herein, when a SSL client 
and server first start communicating, they agree on a 

55 protocol version, select cryptographic algorithms, 
authenticate the server (or optionally authenticate 
each other) and use public -key encryption techniques 
to generate shared secrets. 

After successful SSL handshake at step 63, an 

60 HTML file invoking and an associated logon applet is 
downloaded with software tools and common objects in 
steps 64, 66, to present a web page including name and 
password entry fields for user to enter. The user is 
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then prompted to enter name and password on the Web 
page. If the nMCI Interact system determines that the 
software files including classes for initiating a 
session, have been already downloaded, for example, 
5 from a previous session, the steps 62, 64, 66 are 

skipped. 

The logon applet checks for the name/password 
entry and instantiates a session object in step 72, 
communicating the name/password pair. The session 

10 object sends a message containing the name/password to 
a remote server for user validation in step 74. When 
the user is properly authenticated by the server in 
step 76, another Web page having backplane object is 
downloaded in steps 7 8, 80, 84. This page is referred 

15 to as a home page. At the same time, all the 

application software objects are downloaded in step 
82 . If the system of the present invention determines 
that the backplane and application files have been 
already downloaded, the steps 80, 82, 84 are not 

20 performed. The backplane object is then instantiated 
m step 86. 

As will be explained, the backplane 
communicates with a remote order entry server 
component ("StarOE") server 39 (Figure 2) to retrieve 

25 the user's entitlements in step 88. The entitlements 
represent specific services the user has subscribed 
and has privilege to access. It also describes what 
entitlements the user may have within any single 
service. For example, from the COUser context, the 

30 backplane can obtain the list of applications that the 
user is entitled to access. In addition, each COApp 
holds set of entitlements within that application m 
COAppEntitlements obj ect . 

Using the information from the COUser context, 

35 the backplane knows which COApps to provide, e.g., 
which buttons to install in its toolbar. The 
backplane stores the user specific entitlements in 
memory for other processes to access. After 
determining the entitlements, the backplane initiates 

40 a new thread and starts an application toolbar in step 
90. The application toolbar includes the remote 
services to which the user has subscribed and may 
select to run. From the application toolbar, a user 
is able to select a service to run. Upon user 

45 selection, the selection is communicated from the 

application toolbar to the backplane in steps 92, 94, 
which then launches the graphical user interface 
program associated with the selected service. The 
application toolbar remains on the user display, even 

50 after a particular service has been initiated. This 
is useful when a user desires to start up another 
remote service directly from having run a previous 
service because the user then need not retrieve the 
home page again. 

55 If it is determined that the user entered 

password is not valid in step 70 or step 76, an 
attempted logon count is incremented in step 96. If 
the user's attempted logon count is greater than" a 
predefined allowed number of tries as indicated in 

60 step 98, a message is conveyed to the user in step 101 
and the user must restart the browser. If the user's 
attempted logon count is not greater than the 
predefined allowed number of tries, a "failed login" 
message is conveyed to the user in step 102, and the 
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user is prompted to reenter name/password in step 68. 
If it is determined that the user password has 
expired, the user is prompted to change the password 
in step 104. For example, the user may be required to 
5 change the password every 3 0 days for security 

reasons. Whenever the user changes the password, the 
new password is transmitted in real time to a server 
responsible for updating and keeping the password 
entry for the user. The user than enters the new 

10 password in step 104 and continues with the processing 
described above in step 70. 

An illustrative example of the nMCI Interact 
logon Web page typically includes a name field and a 
password field for the user to enter. After the user 

15 is properly authenticated via the logon page, the nMCI 
Interact home page is retrieved. 

Figures 5 (a) and 5 (b) illustrate example nMCI 
Interact home pages, i.e., a Web page having the 
backplane object 12. The home page 79(a) is 

20 downloaded after the authentication via a logon page 
and provides, for example, a suite 9 5 of network 
management reporting applications including: MCI 
Traffic Monitor application 85; an alarm monitor 
application 87; a Network Manager application 89 and 

25 the Service Inquiry application 91. Access to network 
functionality is also provided through Report 
Requester 83, which provides a variety of detailed 
reports for the client/customer and a Message Center 
77 for providing enhancements and functionality to 

30 traditional e-mail communications. An application 

toolbar 71 is also provided that is different from the 
icons 9 5 in that the application tool bar remains on a 
screen, even when the home page 7 9 (a) is no longer 
displayed. The home page also typically comprises 

35 HTML links to other services 96. These services may 
be new information center, features benefits, or 
support center for the system of the present 
invention. 



40 Backplane Logic 

Figure 6 is a flow diagram illustrating the 
backplane logic process when a user selects a service 
from a home page or the application toolbar. The user 
initially selects an application in step 110. If the 

45 selected application is derived from COAppImpl , the 
COBackPlane object 12 instantiates the desired 
application object by name. The COBackPlane 12 also 
creates a COAppStartThread object to manage the 
startup of the COAppImpl in step 116. Each COAppImpl 

50 is started in it's own thread. COAppStartThread calls 
the COAppImpl 's init() method. Here the COAppImpl 
typically creates the application- specif ic classes it 
needs, including a COAppFrame (or a derived class 
thereof) if desired. COAppStartThread calls the 

55 COApp's start () method. Once the start () method has 
completed, the COAppStartThread ends. 

If the desired application is derived from 
java. applet .Applet, a new browser window is created, 
and directed to the HTML page from which the applet to 

60 be loaded 338. This will cause the browser to load 
the applet, and call its initO and start 0 method. 
In its init() method, the applet obtains a reference 
to the backplane by calling the static method of the 
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COBackPlane class getBackPlane ( ) . Also in its init() 
method, the applet notifies the backplane that it has 
been launched by calling the backplane's regis terApp ( ) 
method. Alternatively, if the desired application is 
5 an application requiring a direct URL launch from the 

home page, for example RTM as shown at step 112, the 
desired application is invoked by retrieving a Web 
page having the application' s URL as shown at step 

10 Each application gets a session identifier in 

step 12 0 upon its startup. Should the applications 
desire to perform some further authentication, they 
are free to retrieve the COUser object, and perform 
whatever special authentication they need, without 

15 troubling the user to re-enter his/her username and 

password. During the processing of functions specific 
to each application, the applications are able to 
communicate with one another as well as with the 
backplane by getting a reference to the applications 

20 or the backplane and invoking the public interfaces or 
methods with the reference. 

After a user is finished with interacting with 
COApp, the user requests the selected COApp to exit 
via a menu selection, clicking on a close box button 

25 on a window frame, or a keyboard command, for example. 

The COApp then requests exit from the COBackPlane. If 
the selected application is derived from COAppImpl, 
the COBackPlane creates a COAppStopThread to manage 
the exit of the COApp. As with startup, each COApp is 

30 stopped in its own thread. COAppStopThread calls 

COApp' s stopO method. Typically a COApp would not 
override this method. It is called for consistency 
with the applet interface of the COApp class. An 
applet's stopO method is called by the Web browser 

35 when the Web browser leaves the page from which the 
applet was loaded, in order to allow the applet to, 
for instance, stop an animation. For consistency with 
this model, COApps may use this method to stop long- 
running threads. COAppStartThread calls COApp' s 

40 destroy () method. Here the COApp typically performs 
resource cleanup routines, including stopping any 
threads, and calling the dispose () method for any 
COAppFrame obj ects . 

If the selected application is derived from 

45 java. applet .Applet , the Web browser window containing 
the page from which the applet was launched is closed. 
This will cause the applet's stopO method to be 
called by Web browser. In its stop () method, the 
applet notifies the backplane that it has been stopped 

50 by calling the backplane's deregisterApp ( ) method. 

Then a user typically requests logoff via menu, 
close box, etc. When such a request is received the 
backplane sends Logoff transaction to the Web Server. 
The backplane closes toolbar and directs the Web 

55 browser to logon URL. Then the backplane exits. 

As further shown in Figure 6, the homepage 
provides links to other Web pages. For example, _ if 
help hypertext is selected in step 122 from the 
application toolbar, a help URL is launched in a new 

60 browser window in step 124. Similarly, if customer 

support hypertext is selected in step 126, a customer 
support URL is launched in a new browser window in 
step 128. If a user selects a marketing promotion 
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hypertext in step 130, URL for new product information 
will be launched in a new browser window in step 132. 
If a product overview hypertext is selected in step 
134, a URL pertaining to the product's features will 
5 be launched in a new browser window in step 13 6. If a 
user selects home in step 13 8, the home page will be 
redisplayed in step 139. 



User 

10 The present invention also includes a user unit 

for representing a user of a current session. The 
user unit is generally implemented as a COUser class 
extending j ava . lang . Ob j ect . The COUser class object 
holds information including a user profile, 

15 applications and their entitlements. In order to 

minimize network traffic, the amount of data carried 
by the COUser is minimal initially, and get populated 
as requests are processed. The requests are generally 
processed by retrieving information from the Order 

20 Entry service. The profile information is then stored 
and populated in the COUser object should such 
information be requested again. 

A COUser object is created when the user logs 
in, and holds the username and password of the user as 
25 an object in the COClientSession object. The session 
object is contained within the backplane, which 
manages the session throughout its lifetime. The code 
below illustrates how this occurs: 
// Within the backplane 

30 COClientSession session - new 

COClientSession ( ) ; 
try { 

Session . logon ("username", "password") ; 
} catch (COClientLogonException e) {...}; 
35 // Should the User object be required 

COUser user = session . getUser () ; 
The logon method of the COClientSession object 
communicates with the StarOE (Order Entry) server 
(Figure 2) , a back-end authentication mechanism, for 
40 authenticating the user. 

The COUser that may be obtained from the 
COClientSession immediately after the login process is 
very sparse. It includes a limited set of information 
such as username, a list of applications that user is 
45 entitled to, for example. The details of each 

entitlement information are retrieved at the time of 
actual processing with those information. 



StarOE 

50 As briefly mentioned, the StarOE server 39 of 

the networkMCI Interact system (Figure 2) is used to 
order, fulfill, and bill for, as well as administer, 
the suite of network applications, providing a 
horizontal service for use by all applications. The 

55 applications communicate to StarOE for all 

authentication, entitlement and system administration 
as well as order entry services. StarOE centrally 
processes these service requests for the individual 
applications by providing all order entry and security 

60 information for the "networkMCI Interact" suite of 
applications . 



WO 99/15979 



-24- 



PCT/US98/20170 



The security information which the StarOE 
maintains and provides describes identification, 
authentication and access control used in the suite of 
applications. All access to the "networkMCI Interact" 
5 is controlled by userids and passwords, as explained 

herein. In addition, individual users are 
specifically granted access to only the necessary 
system objects, i.e., file, programs, menus, reports, 
etc. Access to these individual objects are based 

10 upon the customer privilege models, i.e., 

entitlements, stored in a StarOE database. Thus, all 
information regarding customers and their access 
levels for each product in the suite of network 
applications to which the customers have subscribed 

15 are stored in a customer security profile database 

local to the StarOE. Accordingly, StarOE provides the 
ability to prevent unauthorized, non- customer access 
to "networkMCI Interact" data and applications; the 
ability to allow customers to access multiple 

20 enterprises with one userid; the ability to restrict 

authorized users to specific Intranet applications and 
databases based on applications ordered by the 
customer; and the ability for users to restrict view 
and/or update capabilities within an application or 

25 data set, i.e., customers may provide or restrict 

views of their "enterprise" data to subgroups within 
their organization. 

By utilizing the system of the present 
invention, customers no longer have to place manual 

30 calls to order entry hubs when requesting order 

transactions. For example, users may be added to the 
system without an enterprise's support team 
intervention. In sum, customers may manage their 
communications services in a secure environment and 

35 also, for example, monitor their network traffic via 
the Internet, as well as have a capability to add 
products and services to their account, in an 
automated fashion and all in one session without 
having to enter and exit the individual application 

40 services separately, and without having to contact a 
customer support representative. 

Figure 7 illustrates a general architectural 
overview of the StarOE component which includes a 
StarOE server 3 9 resident m a midrange computer, and 

45 an associated client application 154 running in a user 

platform having a Web browser, hereinafter referred to 
as a StarOE client application. The StarOE server 39 
processes a number of transaction requests relating to 
authentication and entitlements, from other 

50 application services, both from the client and the 
application server 15 8 sides of the network. In 
addition, the StarOE server 39 receives transaction 
requests from the StarOE client application. The 
transactions are typically message driven and comprise 

55 requesting transactions and response transactions. 

The StarOE server 39 responds to the message reguests 
by formulating transaction responses and transmitting 
them to the requesting servers and clients. 



60 The StarOE client application 

The StarOE client application 154 is one of the 
client browser applications running in the Web browser 
14, and provides a Web -based GUI interface implemented 
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accordingly and conforming to the networkMCI Interact 
GUI interface standard for the integrated suite of 
customer network management and report applications, 
as described herein. As described, the StarOE client 
5 application 154 is launched at the client initiation 

by the backplane object and generally includes Java 
applications and applets for providing a common Web- 
based GUI for interacting with customers at the front - 
end side. 

10 When a customer launches the StarOE application 

from the home page, the main window as illustrated in 
Figure 16, is presented. From this main window 1500, 
a customer may select to order and fulfill application 
services, request user id's, and create user security 

15 profiles for the "networkMCI Interact'' suite of 

applications. The main window 1500 includes a menu 
bar 1506 with options to perform various StarOE tasks. 
The main window also includes a toolbar 1504, common 
to all networkMCI Interact applications. The toolbar 

20 1504 has buttons that also perform the various StarOE 
functions. Typically, the user list is presented, 
i.e., displayed as a tree 1502, within the main window 
1500. 

The menu options 1506 include: file menu 

25 options which includes a select enterprise option for 
allowing administrators to open a user list for a 
different enterprise, or add a new enterprise to their 
enterprise list, print option, and exit option which 
shuts down the StarOE application; edit menu option 

30 which includes add new application, modify, and delete 
options; options menu which enables a global security 
setup for the toll free manager application; view menu 
which includes options to refresh the screen by 
retrieving the latest user list for the opened 

35 enterprise from the StarOE server and displaying the 
list on the screen, to expand all nodes in the user 
list, and to collapse all nodes in the user list; and 
help menu option which launches the help engine with 
StarOE help text. The toolbar 1504 also includes the 

40 options for a select enterprise, refresh, expand all, 
collapse all, print and help options. 

A typical process flow logic for StarOE client 
application starts with the home page launching the 
StarOE client and passing a reference to a common user 

45 information object. This object includes the user id, 
and the default enterprise for that user. The main 
window 1500 having the menu options 15 06 and the 
toolbar 1504 is then presented. The StarOE client 
application then sends a transaction message "get 

50 StarOE security" including the user id, enterprise id, 
and the StarOE application code in the message. The 
StarOE server 39 returns racf id, an access level 
representing whether the user is an external admin, a 
member of an account team, an internal admin, or a 

55 customer support admin, for example. If the user that 
launches the StarOE application xs an external admin, 
the user list is displayed immediately since external 
administrators may view only one enterprise. For 
external administrators, an enterprise name is 

60 retrieved from the StarOE server 39 by sending and 
receiving a "get user enterprise list" transaction 
request and response. 

If the user is not an external administrator, 
then a dialog is presented for the user to select 
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which enterprise to view. When user selects an 
enterprise to view, a "get user list" transaction 
message having enterprise id is sent to the StarOE 
server 39 to retrieve a list of user ids, a list of 
5 applications for each user, an access type for each 
application, and reporting types for StarWRS (e.g., 
Toll Free, Vnet, Vision, CVNS) . The client 
application also sends a "get application list" 
transaction message to retrieve from the StarOE server 

10 39 a list of application codes, description, and an 
application array position. The user list is then 
displayed within the main window as shown at 1502. 

Every user list has a New User node 1502a as 
the first node under an enterprise 1502b. This node 

15 may be selected to order a new user. An existing user 
node 1502c may be selected to edit and add new 
applications for that user. When an existing user 
node 1502c is selected, the edit/add new application 
options on the menu 1506 is enabled and disabled 

20 according- to what applications the user already has. 
An existing user application node 1502d may be 
selected to edit/modify/delete options within the 
application . 

With regard to user selection of the select 

25 enterprise menu option or toolbar button in Figure 16, 
the browser displays the web page having a dialog box 
which enables an administrator to work with a 
different enterprise, as well as add an enterprise to 
their enterprise list and additionally includes the 

30 ability to set up new users or modify various options 
available to existing users. 

During the StarOE add or modify procedure 
described above, security information regarding 
customer entitlements for application services may 

35 also be initialized. For example, a screen may be 
presented for setting up Toll Free Network Manager 
("TFNM") security information and is displayed when 
TFNM is ordered or modified. Preferably, a user's 
TFNM security profile includes at least one corp id, 

40 with each corp id having an associated racf id. 

Preferably, a setup security object handles the 
process of setting up security for each application. 
A constructor for this object initializes the user id 
and a modify flag as passed in from the StarOE client 

45 application 154. The object retrieves the toll free 
hierarchy from the StarOE server 39 using the "get 
hierarchy" message. The client application 154 sends 
the enterprise id, and toll-free flag in the request, 
and the StarOE server 39 returns the list of toll-free 

50 corp ids for the enterprise. If the modify flag is 

set, a "get security" message is sent to the server 3 9 
to retrieve the user's TFNM security profile. As a 
displayed tree structure is loaded with each toll free 
corp id, racf id is entered by a user. When the 

55 submit button is pressed, the setup security object 
calls its send security method which causes the 
formatting and sending of "setTFNM security" message 
to the StarOE server 39. When the StarOE server 39 
receives the message, it sets the security accordingly 

60 for the TFNM application. 

The StarOE administration component is also 
utilized to order, for example, to add or modify, 
various reporting options used during web based report 
generation by the nMCI Interact StarWRS system as will 
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be described. Figure 17 is a sample StarOE screen 
1540 for adding and modifying reporting options which 
are used by the StarWRS. The StarOE displays the toll 
free hierarchy for security setup when toll free 
5 reporting is ordered or modified. The hierarchy 

includes a list of corp ids for a given enterprise, 
with each corp id 1542 having a list of toll tree 
numbers 1544 under it. The list may be displayed in a 
tree format. The reporting options at the toll free 

10 number level include unpriced reports (UR) , unpriced 
call detail (UCD) , and real time monitor reports. 

Typically, a user's toll free reporting 
security profile includes at least one toll free 
number with at least one reporting option associated. 

15 The client application 154 generally invokes an object 
to handle the reporting option changes and passes m 
the user id and a modify flag. This object then 
retrieves the toll free hierarchy from the StarOE 
server 39 using the "get hierarchy" message. The 

20 client application 154 sends the enterprise id, and 

toll free flag in the request, whereby, the server 39 
returns the list of toll free corp ids for the 
enterprise. If a modify flag is set, a "get toll-free 
security" message is sent to the server to retrieve 

25 the user's toll free security profile. 

As each corp id is expanded, a "get toll-free 
numbers" message is sent to the server 39 asking for 
all the numbers for the corp id selected. As each 
toll free number is added, a search in the user's 

30 profile for that number is conducted. If the number 
is found, the report options are added next to number 
text as shown at 1546. Furthermore, if the number has 
been deactivated, a text "<inactive>" , for example, is 
added to the display as shown at 1548. The inactive 

35 numbers are not modifiable. When the unpriced reports 
or unpriced call detail check boxes 1541 are changed, 
the text next to the toll free numbers selected 
reflects the state of the check box. The check boxes 
depict report options to which a user has access for 

40 toll free numbers. When more than one toll free 
number is selected, the check boxes are marked 
unchecked. When a submit button is pressed, the 
object calls its send security class method which 
causes the formatting and sending of a "set user toll- 

45 free security" message to the StarOE server 39. 

It should be understood that besides performing 
various order entry and administrative functions for 
the TFNM application, other application services, 
including reporting for VNET, Vision, Broadband, Call 

50 Manager, and invoice reporting may be ordered and the 
security information pertaining to each application 
may be modified in a similar manner. 

StarOE client application 154 particularly 
provides screen displays by invoking associated class 

55 objects launched by the backplane unit as described 
above. The StarOE client application 154 employs a 
Java application program and is implemented by 
extending the COApp class, one of common objects ' 
provided and utilized in the present invention. 

60 Because the client program 154 is not implemented as 
an applet, and also because the client program 154 
employs the container Frame for customer display 
windowing purposes, the client program 154 runs, to a 
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degree, independent of the browser within which the 
backplane is deployed. 

Referring back to Figure 7, the StarOE client 
application interacts with the StarOE server in 
5 providing various order entry functions for all 

applications as described above and, as described 
herein with reference to the back-end functionality of 
the nMCI Interact system. Communications between the 
StarOE client 154 and the server 39 typically use 
10 TCP/IP, running a UNIX process listening in on a known 
TCP port. 

In the preferred embodiment, as shown in Figure 
7, the StarOE server 39 provides a number of processes 
for performing a number of specific functions. For 

15 example, a fulfillment process monitors new customers 

being added to the system and notifies a fulfillment 
house 298 accordingly (Figure 9). The fulfillment 
house then may send appropriate subscription packages 
according to the information received from the 

20 fulfillment process to the new customer. Another 
process, a reconciliation process, may handle 
synchronization of data with a mainframe system 
database and also with databases associated with the 
individual fulfilling systems. Yet another process, a 

25 billing process, may handle directing billing 

information to different billing streams 157 (Figure 
7) . 

The StarOE server 39 further maintains a 
database 16 0 for storing all the "networkMCI Interact" 

30 users and their security information such as passwords 
and application entitlements and hierarchies 
describing the user's access privileges to specific 
application services/sub- services which may be 
requested by other application servers and clients in 

35 the network. Generally, the hierarchies are customer - 
defined during the order entry process, and describe 
the subdivision of calls into nodes arranged in a n- 
way tree. The "networkMCI Interact " back-end servers 
apply the hierarchy definitions to their data at 

40 report time when generating reports, typically as 

queries on a node-by-node basis to the result data set 
which was extracted using any other criteria supplied. 
The trees of the hierarchies have essentially 
arbitrary complexity, i.e., the number of nodes is 

45 unlimited. Each node is assigned calls according to a 
template of conditions. Conditions may be defined as 
a combination of one or more ANIs, corp IDs, ID codes, 
Card numbers, account codes, location/node ids, etc. 
These filters can be applied at any node in the tree. 

50 The hierarchies may be applied as both selection 

criteria (e.g., "report on all calls at these nodes or 
their descendants" , in combination with other 
criteria) and roll-up targets (e.g., group the results 
in this report at this level in the tree) . These 

55 entitlement and hierarchies may be modified via the 

StarOE client application 154 executed at the customer 
workstation 20. 

Referring to Figure 7, a process running ^in a 
StarOE client application process 154 sends 

60 transaction request messages via the nMCI Interact 
infrastructure, comprising, e.g., the web server 
cluster 24 and a dispatcher server 26 (Figure 2) , to 
the OE server 39. The StarOE server 39 responds to 
requests by searching the security profile for the 
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information requested, formulating appropriate 
transaction response messages and transmitting them 
back to the requesting process. As an example, other 
during the login procedure, the client login process 
5 formulates a transaction message including a user 

name/password and a validation request for a given 
customer. The StarOE server 3 9 looks for the matching 
name/password pair in the security profile for the 
customer, and if the name/password pair is found, the 

10 server 39 formulates a valid user message response for 
the login process running in the client platform, 
including m the message the enterprise id, time zone, 
user id and password information and transmits the 
response via TCP/IP back to the login process. When 

15 the StarOE server 39 detects that the password has 

expired, the server 39 notifies the customer, via the 
client application 154 to change the password. The 
changed password is sent to the StarOE server 3 9 
formatted in a message interface, "change password 

20 request," for example. The server 39 upon receiving 

the message updates the password for the given user in 
its user profile stored in StarOE database 160, and 
responds with appropriate return codes to the StarOE 
client 154. The login process, upon receiving the 

25 response may then continue with its normal course of 
processing . 

Another example of a service provided by the 
StarOE is retrieving an application entitlement list 
for a given customer. As described briefly above, an 

30 entitlement describes a privilege or authorization 

that a customer has. It describes what applications a 
customer may access and also describes what the 
customer can do within that application. In addition, 
it describes what back-end services that application 

35 and customer combination may access. For example, a 

customer may be entitled to use or access many 
applications and for each application, the customer 
can have a different set of entitlements. Thus, 
entitlements may come in two different sets: a first 

40 set specifying what the customer may do within the 

application, e.g., allow the customer to have update 
access to a particular view and only read-only access 
in a different view; and, a second set specifying what 
back-end services this particular application and 

45 customer may access. 

As described previously, all the information 
relating to entitlements for a given customer is 
stored m customer profile database 160 located with 
the StarOE server. When the backplane requests via 

50 TCP/IP the entitlement transaction, for example, in a 
"get application list" request message, the security 
module retrieves and transmits back via TCP/IP to the 
backplane the list of authorized applications 
accessible by a given customer in a transaction 

55 response. The backplane uses the list to determine 
which buttons on the "networkMCI Interact" home page 
should be activated, thus controlling access to 
products. Similarly, individual back-end application 
servers 15 8 may make a request for entitlements within 

60 that application for a given customer. For example, 
the reporting component of the "networkMCI Interact" 
system, herein referred to as "StarWRS" web-based 
reporting system which provides a customer with their 
network priced and un-priced call detail data, 
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generates a request for hierarchy data for Vnet, 
VISION, CVNS and Toll-free customers whenever reports 
need be generated. In response, the StarOE retrieves 
the corresponding hierarchy data and transmits them in 
5 real time to the StarWRS system as will be described. 

In providing the authentication, entitlement, 
and hierarchy information, including those described 
above, the StarOE server database 16 0 stores user 
profiles locally. Additional data needed are 

10 typically accessed from the enterprise host systems 
159. The StarOE server 39 may be implemented as a 
concurrent server allowing simultaneous multiple 
client connections. The server 39 listens on a known 
port, and when a client connects, the server 39 forks 

15 a new process to handle the client connection. The 
server 3 9 may also implement a thread to handle each 
client connection . 

The StarOE server 39 is preferably implemented 
utilizing object oriented programming (OOP). As an 

20 example, when a "get hierarchy list" message is 
initiated at the client application to invoke 
retrieval of a toll free corp id list from the server 
39, a "Hierarchy" class may be instantiated which 
includes a Get ( ) method to determine which Hierarchy 

25 product is to be retrieved (e.g., Toll-free, 

Vnet /CVNS, or Vision) and to return the appropriate 
information. Another object may be invoked to format 
the data into a response message and return the 
message back to the client. As another example, when 

30 a "get application list" request message is initiated 
at the client application, an "Application" class may 
be instantiated which encapsulates the interface into 
a database table (not shown) having applications 
information. Particularly, the Get ()- method in this 

35 class accesses the Applications table in the database 
and return the list of application codes and their 
descriptions . 

Figure 8 is a high level input process flow 
diagram, illustrating inputs to the StarOE server 39 

40 of the nMCI Interact system. Through the StarOE 
server, the integrated interface system of the 
invention handles a wide variety of key functions for 
the suite of network applications. Each application 
will, herein forth, be also referred to as a 

45 fulfilling system, having a fulfilling client and a 
fulfilling server. The system of the present 
invention handles security and authentication requests 
from both the client and server sides of each 
fulfilling system as shown in 282a- d and 284. These 

50 requests are automatically generated whenever the 

customer makes a request of the server. For example, 
they are generated when a customer clicks on the icon 
from the homepage (Figure 4) for a service such as 
TFNM . 

55 In addition, as mentioned, when a customer 

first logs on, the customer is presented with a dialog 
box prompting for user ID and password. When the 
customer clicks a submit button, for example, the 
backplane (or platform) verifies the customer is valid 

60 by inquiring with the StarOE system as shown in 286. 

The return response is either "invalid user/password" 
or "valid user" . When the customer has been 
authenticated, the customer is then presented with a 
list of authorized applications. This list determines 
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which buttons, for example, representing each 
application are active, thus controlling customer 
access to products and services. 

In addition, also shown in 286, the customer 
5 may be issued a temporary password with the customer's 
fulfillment package, which enables a user to log into 
the system the first time. 

Information may also be entered and requested 
by a number of sites other than a user platform. For 

10 example, order entry "OE" Hubs 288 may enter 

information directly into the StarOE database 160 to 
register new customers to the integrated suite of 
network applications. They may also access the data 
in StarOE directly to modify customer information, and 

15 to add or remove subscribed services. 

Other inputs to the StarOE server may include 
entitlement data from a legacy order entry system 
referred to as Network Capabilities System ("NetCap") 
290 and from a circuit order management system 

20 ("COMS") 291. For example, the NetCap mainframe 29 0 

may send the appropriate hierarchy of toll-free 
numbers for a specific customer in response to 
registry message registering the new customer to the 
mainframe 29 0. The hierarchy of toll-free numbers 

25 describes the new customer's entitlements to the TFNM 
services. This hierarchy may be used by other 
services in the integrated suite of network 
applications, for example, the StarWRS reporting 
application . 

30 Additional authentication and entitlement data 

may be transmitted from a corporate order entry system 
("CORE") 292 which generates two sets of hierarchy 
files on a daily basis. One set comprises deltas 
only, the other comprises a full hierarchy. 

35 Notification is made to the StarOE when these are 

available. StarOE performs a reconciliation process 
to update the hierarchy files. Figure 9 is an 

output process flow diagram, illustrating outputs and 
responses from the StarOE server 39 to the requesting 

40 systems and processes. An example of an output is an 
authentication response to the client side of the 
individual applications, e.g., call manager 1100, 
priced reporting system 400, etc., as well as the 
backplane. In addition, a list of accessible 

45 applications for a given customer, is output to the 
backplane platform via platform web servers 24 . The 
StarOE also outputs various updated data to database 
systems associated with specific individual 
applications in the suite of network applications. In 

50 addition, the individual fulfilling systems receive 
messages from the StarOE regarding modifications 
effected by a customer interaction. For example, as 
part of the reconciliation process, the StarOE may 
pass a list of toll free numbers which represent 

55 services which are to be discontinued and deleted from 

Traffic View. Upon receipt of this information, the 
Traffic View server sends another message to a system 
responsible for collecting call detail information 
which system then discontinues collection of call data 

60 for the numbers deleted. Another example output to 
individual fulfilling system is hierarchy data to 
reporting fulfilling systems 400, 500 when a customer 
requests reports. The customer hierarchy data is sent 
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in real time by the StarOE for up-to-date report 
information. 



StarWRS 

5 As mentioned herein, the data architecture 

component of the networkMCI Interact system focuses on 
the presentation of real time (un-priced) call detail 
data and reports, such as presently provided by MCI's 
TrafficView ("TVS") Server, and priced call detail 

10 data and reports, such as presently provided by MCI's 
operational data store "StarODS" Server. 

Referred to as "StarWRS" , the WWW/Internet 
Reporting System 200, as shown in Figure 10, provides 
a client, middle- tier service and application proxy 

15 components enabling customers to request, specify, 

customize, schedule and receive their data and account 
information in the form of reports that are generated 
by the various back-end application servers. As will 
now be described in detail, the StarWRS reporting 

20 system 200 comprises the following components and 
messaging interfaces : 

1) those components associated with the Client 
GUI application front end including a report requestor 
client application 212, a report viewer client 

25 application 215 and, an Inbox client application 210 
which implement the logical processes associated with 
a "Java Client", i.e., employs Java applets launched 
from the backplane (Figure 3) that enable the display 
and creation of reports and graphs based on the fields 

30 of the displayed reports, and, allows selection of 

different reporting criteria and options for a given 
report; and, 

2) those middle- tier server components enabling 
the above-mentioned reporting functionality including: 

35 a Report Manager server 250, a Report scheduler server 
260, and an Inbox Server 270. Supporting- the StarWRS 
reporting functionality as will be described are the 
StarOE client and corresponding StarOE server 39 
applications . 

40 The Report Manager CRM") server 250 is an 

application responsible for the synchronization of 
report inventory with the back-end "Fulfilling" 
StarODS server 40 0 and Traffic View server 500; 
retrieval of entitlements, i.e., a user's security 

45 profiles, and report pick list information, i.e., data 
for user report customization options, from the StarOE 
server 39; the transmission of report responses or 
messages to the Dispatcher server 26; the maintenance 
of the reporting databases; and, the management of 

50 metadata used for displaying reports. In the 

preferred embodiment, the RM server 250 employs a Unix 
daemon that passively listens for connect requests 
from the GUI client applications and other back-end 
servers and deploys the TCP/IP protocol to receive and 

55 route requests and their responses. Particularly, 
Unix stream sockets using the TCP/IP protocol suite 
are deployed to listen for client connections on- a 
well-known port number on the designated host machine. 
Client application processes, e.g., report requestor 

60 212, desiring to submit report reguests connect to RM 
2 50 via the dispatcher 2 6 by providing the port number 
and host name associated with RM 250 m a request 
message. Request messages received by the RM server 
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are translated into a "metadata" format and validated 
by a parser object built into a report manager proxy 
250' that services requests that arrive from the GUI 
front -end. If the errors are found in the metadata 
5 input, the RM 250 will return an error message to the 
requesting client. If the metadata passes the 
validation tests, the request type will be determined 
and data will be retrieved by the fulfilling server in 
accordance with the meta data request after which a 

10 standard response is sent back to the requesting 

client. As shown in Figure 10, interface sockets 252 
are shown connecting the Dispatcher server 26 and the 
RM server 250 and, other socket connections 254, 256 
are shown interfacing with respective back end servers 

15 4 00 and 5 00. In one embodiment, a back-end midrange 
application known as the TrafficView System receives 
the metadata reqeusts to provide unpriced traffic call 
detail and reporting data through messaging interface 
256 to the Report Manager. Additionally, a back-end 

20 midrange application known as the StarODS server 

receives report requests for priced call detail data 
data through a Talarian smart socket messaging 
interface 3 50 to the Report Manager. Additionally, as 
shown in Figure 10, the priced and unpriced data is 

25 FTP 7 d directly to the Inbox Server and a notification 
message is sent to the report manager server 250 from 
the Traffic View server 500. Although not shown in 
Figure 10, it should be understood that the RM 250 
server can manage reporting data for customer 

30 presentation from other back-end and legacy servers 
including, e.g., Event Monitor and Service Inquiry 
servers, etc., in order to present to a customer these 
types of network management and reporting data. 

The report manager server additionally utilizes 

35 a database 258, such as provided by Informix, to 
provide accounting of metadata and user report 
inventory. Preferably, an SQL interface is utilized 
to access stored procedures used in processing 
requests and tracking customer reports . A variety of 

40 C++ tools and other tools such as Rogue Wave's 

tools. h++ are additionally implemented to perform 
metadata message parsing validation and translation 
functions . 

The Report Manager server 250 additionally 
45 includes the scheduling information, however, a report 
scheduler server component passes the report request 
to the back-end fulfilling servers 4 00, 500 at the 
scheduled times. 

As shown in Figure 10, the Report Scheduler 
50 ("RS") server component 260 interfaces directly with 

the Report Manager server 250 to coordinate report 
request scheduling and processing. It should be 
understood that the respective report management and 
scheduling functions could be performed in a single 
55 server. Particularly, the RS 260 is a Unix program 

deploying Unix stream sockets using the TCP/IP 

Protocol suite to send requests to the back-end 
ulfilling servers such as the StarODS server 400, TVS 
server 500, at pre- specif ied times, and receives their 
60 responses. As shown in Figure 10, RS interface socket 
connections 264, 266 are shown interfacing with 
respective back end servers 400 and 500. In the case 
of priced billing data from StarODS 400, report 
requests are published by the RS server 260 to a 
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pre-defined subject on the Talarian Server. When 
handling other incoming messages published by back end 
servers using Talarian SmartSockets 4.0, another 
daemon process is necessary that uses Talarian C++ 
5 objects to connect their message queue and extract all 
messages for a given subject for storage in a database 
table contained in database 263. Each message 
includes the track number of the report that was 
requested from the fulfilling server. 

10 From the report requestor interface, the user 

may specify the type of reporting, including an 
indication of the scheduling for the report, e.g., 
hourly, daily, weekly or monthly. For priced data the 
user has the option of daily, weekly, or monthly. For 

15 real-time, or unpriced data, the user has the option 

of hourly, daily, weekly or monthly. The report 
scheduler interface additionally enables a user to 
specify a pager or E-mail account so that an e-mail or 
pager message may be sent to indicate when a requested 

20 report is in the Inbox server 27 0. 

The Inbox Server component 27 0 serves as the 
repository where completed report data and event 
notification data are stored, maintained, and 
eventually deleted and is the source of data that is 

25 downloaded to the client user via the dispatcher 

(Figure 2) over a secure socket connection 272. It is 
also a Unix program that is designed to handle and 
process user reguests submitted m metadata format 
using an Informix database. Once report results are 

30 received from the StarODS 4 00 and TVS 50 0 and any 

other back-end or fulfilling servers (not shown) , the 
Report Manager server 2 50 communicates the 
corresponding report metadata to the Inbox server 27 0 
over socket connection 274 as shown in Figure 10. The 

35 metadata will be stored in the Inbox server database 
273 along with the report results. Thus, if the 
metadata is required to be changed, it will not 
interfere with the information needed to display the 
reports contained in the Inbox. Additionally, as 

40 shown in Figure 10, the Inbox server interfaces with 
the report scheduler to coordinate execution and 
presentation of reports. 

As described above, the StarOE server 39 and 
database 160 is the repository of user pick lists and 

45 user reporting entitlements. Particularly, it is 

shown interfacing with the Inbox server 27 0 and report 
scheduler servers 260. The Report Manager server does 
include information in the report metadata that will 
tell the Report Requestor client application it needs 

50 to get information (e.g., Pick Lists) from the StarOE 
server 39. 

With regard to the front -end client GUI 
components, the above-mentioned Inbox client 
application 210 functions as an interface between the 

55 client software and the Inbox server 27 0 for 

presenting to the customer the various type of reports 
and messages received at the Inbox including all 
completed reports, call detail, and news. Preferably, 
the messages for the user in the inbox are sorted by 

60 type (report, call detail) and then by report type, 
report name, date, and time. 

Particularly, the Inbox client application uses 
the services of the backplane (Figure 3) to launch 
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other applications as needed to process report 
messages. The inbox will also use the services of the 
data export objects to provide a save/load feature for 
inbox messages, and, is used to provide a user- 
5 interface for software upgrade/download control. 
Inbox messages are generated by the versioning 
services of the backplane; actual downloads will be 
accomplished by a request through the inbox. 

In the preferred embodiment, the inbox client 

10 is able to receive information on multiple threads to 
allow a high priority message to get through even if a 
large download is in progress. Typically, the browser 
is configured to allow more than one network 
connection simultaneously, i.e., the polling thread on 

15 the client uses a separate connection to check for new 
messages, and starts a new thread on a new connection 
when a new message is detected. In this way, multiple 
messages may be downloaded simultaneously. 

The Report Requestor application 212 is a 

20 client application enabling user interaction for 

managing reports and particularly includes processes 
supporting: the creation, deletion, and editing of the 
user's reports; the retrieval and display of reports 
based on selected criteria; the display of selected 

25 option data; and the determination of entitlements 
which is the logical process defining what 
functionality a user can perform within the StarWRS 
application. In the preferred embodiment, a Report 
request may be executed immediately, periodically, or 

30 as "one -shots" to be performed at a later time. As 
described herein, the report scheduler service 
maintains a list of requested reports for a given 
user, and forwards actual report requests to the 
appropriate middle- tier servers at the appropriate 

35 time. Additional functionality is provided to enable 
customers to manage their inventory, e.g., reschedule, 
change, or cancel (delete) report requests. 

The Report Viewer application 215 is a GUI 
Applet enabling a user to analyze and display the data 

40 and reports supplied from the fulfilling servers such 
as ODS 400, Traffic View (TVS) 500, and other systems 
such as Broadband and toll free network manager. 
Particularly, all reporting is provided through the 
Report Viewer client application 215 which supports 

45 text displays, a spreadsheet, a variety of graphic and 
chart types, or both spreadsheet/graph simultaneously, 
and, is launched from the inbox client 210 when a 
report is selected. The Report Manager 250 includes 
and provides access to the metadata which is used to 

50 tell the Report Requestor what a standard report 

should look like and the "pick -list" options the user 
has in order for them to customize the standard 
report. It is used to tell the Report Viewer client 
how to display the report, what calculations or 

55 translations need to be performed at the time of 

display, and what further customization options the 
user has while viewing the report. It additionally 
includes a common report view by executing a GUI- 
applet that is used for the display and graphing of 

60 report data and particularly, is provided with 

spreadsheet management functionality that defines what 
operations can be performed on the spreadsheet 
including the moving of columns, column suppression, 
column and row single and multiple selection, import 
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and export of spreadsheet data, printing of 
spreadsheet, etc. It is also provided with report 
data management functionality by defining what 
operations can be performed on the data displayed in a 
5 spreadsheet including such dynamic operations as 

sorting of report data, sub-totaling of report data, 
etc.. Furthermore, the report viewer 215 is provided 
with functionality enabling the interpretation of Meta 
Data; and, functionality enabling communication with 

10 the Backplane (Figure 3) . The report viewer 

application 215 will also be able to accept messages 
telling it to display an image or text that may be 
passed by one of the applications in lieu of report 
data (e.g., Invoice, Broadband report, etc.) 

15 By associating each set of report data which is 

downloaded via the Inbox server 27 0 with a "metadata" 
report description object, reports can be presented 
without report - specif ic presentation code. At one 
level, these metadata descriptions function like the 

20 catalog in a relational database, describing each row 
of a result set returned from the middle tier as an 
ordered collection of columns. Each column has a data 
type, a name, and a desired display format, etc. 
Column descriptive information will be stored in an 

25 object, and the entire result set will be described by 
a list of these objects, one for each column, to allow 
for a standard viewer to present the result set, with 
labeled columns. Nesting these descriptions within 
one another allows for breaks and subtotaling at an 

30 arbitrary number of levels. 

The same metadata descriptions may be used to 
provide common data export and report printing 
services. When extended to describe aggregation 
levels of data within reporting dimensions, it can 

35 even be used for generic rollup/drilldown spreadsheets 
with "just - in- time" data access. 

The metadata data type may include geographic 
or telecommunications - specif ic information, e.g., 
states or NPAs . The report viewer may detect these 

40 data types and provide a geographic view as one of the 
graph/chart types. 

An overview of the report request/scheduling 
process 6 00 implemented by StarWRS Report Manager and 
Report Requestor tools will now be described. 

45 After preliminary logon, authentication and 

verification of StarWRS web nased reporting 
entitlements, as described above with respect to 
Figures 4-6, the user may select the Report Requestor 
icon 83(a) from the home page screen display 79(a) of 

50 Figure 5 (a) , which initiates display of a StarWRS 
report requestor web page. 

Figure 12 (a) illustrates an exemplar dialog box 
155 0 provided on the report requestor web page that is 
presented to the user after the logon and 

55 authentication process. From this dialog, the user is 
enabled to edit an existing report maintained in the 
report manager inventory, by selecting "edit" button 
1551, generate a new report by selecting "new 7 ' button 
1553, copy an existing report by selecting button 

60 1554, or delete an existing report by selecting button 
1555. When creating a new report or editing an 
existing report, the user may enter the desired 
reporting options including: 1) the report product, as 
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indicated by menu 155 8, and which includes toll-free, 
vision, and Vnet options; 2) the report category, as 
indicated by menu 1559, and which includes options 
for: analyzing traffic, call center, call detail, 
5 checking calling frequencies, financial, marketing, 
monitoring usage, and telecommunications categories; 
3) the report type, as indicated by menu 1560, and 
which includes priced call detail data or traffic data 
options; and 4) a report direction, as indicated by 

10 selection areas 1563, and which includes inbound, 
outbound, or both directions. 

Referring to the flow chart of Figure 11 (a) 
depicting the StarWRS reporting options, user 
selection of the report product, report category, 

15 report type, and report direction, is indicated at 
step 320. Additionally, at step 325, the user may 
select the report format associated with a reporting 
category. For example, in the screen display of 
Figure 12 (a) , associated with the analyze traffic 

20 report category, the report format options indicated 
in selection field 1565 include the following: area 
code summary, country code summary, state summary, 
frequent numbers, payphone report and review calls 
options. For the financial report category, report 

25 formats include: longest calls, most expensive calls, 
payphone report, and area code summary; for marketing 
report category, report formats include: country code 
summary, state summary, frequent numbers, frequent 
area code summary, frequent state, and frequent 

30 cities. For the telecommunications report category, 

report formats include: call duration summary; for the 
call center report category, report formats include: 
most active toll free numbers, state summary, and 
country code summary. For the monitor usage report 

35 category, report formats include: longest calls, most 
expensive calls, most active calling card and most 
active toll free numbers. For the check calling 
frequencies report category, report formats include: 
frequent numbers, frequent area code, frequent state 

40 and frequent cities. It should be understood that 

enablement of any of these reporting options is based 
according to predefined user entitlements. That is, 
as described above, a "Get User Security" message with 
a reporting application set, and a "Get User Report 

45 Security" message are sent to the StarOE server 39 via 

the Dispatcher server 26 to retrieve that user's 
detailed security profile (entitlements) for a user 
that has the reporting application option. These 
entitlements include a list of all the report 

50 products, i.e., Vnet, Vision, Toll free, report types 
(priced or unpriced) and the report categories that 
are available for that user. 

In accordance with the user report selections, 
if a report had already been created and maintained in 

55 the report manager database, it will be displayed in 
the report inventory field 1568 of Figure 12 (a) . 
Referring back to Figure 11(a), at step 326, a 
determination is made as to whether an existing -report 
from inventory is selected. If an existing report is 

60 not selected then the user is prompted to generate a 

new report according to customization options that the 
user is entitled for the selected report product, 
category, type, etc., as indicated at step 330. If 
an existing report is selected at step 326 based on 
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the report product, category, type, etc., then the 
user is prompted at step 328 to select from among the 
following options: a report edit option, as shown at 
step 33 5; a report delete option, m which case the 
5 selected report will be deleted at steps 338 and 339 ; 

and, a report copy option, in which case an existing 
report will be copied, e.g., for subsequent editing, 
as shown at steps 340 and '341. 

Whether creating a new report or editing an 

10 existing report, the user is enabled to select 

customization options as indicated at step 330, Figure 
11 (a) . Figure 12 (b) illustrates the dialog screen 
159 6 presented to the user showing all the report 
customization categories for building a new report and 

15 editing an existing report. From this screen and 
related report building dialog boxes, all of the 
initial values for retrieving the MetaData, 
customization options and GUI builder options from the 
report manager server 250 necessary to build (edit) a 

20 report are provided in accordance with the user's 

entitlements. Thus, in view of the exemplar web page 
shown in Figure 12 (b) , a user may provide the 
following customization and report builder options as 
indicated in the field 1570: general customization 

25 options, by selecting field 15/1; layout customization 
options, by selecting field 1573; access customization 
options, by selecting field 1575; hierarchy 
customization options, by selecting field 1577; 

?eographic customization options, by selecting field 
578; and, notification customization options, by 
selecting field 1579. For the following description 
regarding Figure 12 (b) it is assumed that the area 
code summary format had been selected, however, it 
should be understood that the same principles apply to 
35 any selected format. 

With regard to the "general' 7 customization 
options, the user is enabled! to specify or change the 
report title, by selecting field 1571a, report 
description, by selecting field 1571b, and the report 
40 schedule, by selecting field 1571c. For the example 
selection or report title customization shown in 
Figure 12 (b) , the right hand field 1580 will present 
the user with a field 1581 for entering the title of 
the report. If an existing inventory report had been 
45 selected, then the field 1580 will be display the 

existing title. Generally, for each of the 
customization screens displayed for existing reports, 
Report Manager will autopopulate the right hand field 
1580 with the existing report values. 
50 When selecting the report schedule 1571c, the 

user is presented with a screen 1597, as shown in 
Figure 12 (c) . The entry options for selection in the 
right hand field 1580 includes: selection of time 
zone, by menu choice 1582; selection of the report 
55 schedule radio buttons 1583 to specify the report as 

recurring, daily, weekly, monthly, or hourly entry 
field the nature of screen; a time range for the 
report as specified by entry fields 1584; and, a" date 
range for the report as specified by entry fields 
60 1585. The user may also specify the report as a "one- 
shot" by selecting radio button 1586. 

Referring back to exemplar screen shown in 
Figure 12(b), with regard to the layout customization 
options, the user is enabled to specify or change the 
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number of report rows, by selecting field 1573a, and 
specify or change the report columns, by selecting 
field 1573b. For example, selection of report columns 
customization will present the user with a columns 
5 customization screen such as example screen display 
159 8 presented as shown in Figure 12(d). In Figure 
12(d), the right hand field 1580 indicates a column 
tab 15 87, and a sorts tab, 15 88. The column tab 
enables the user to specify add or remove columns, 

10 with the selection of individual columns names 

provided in field 1589. An example description of the 
column headers for an example selection of columns is 
shown in field 1590. 

Referring back to Figure 12 (d) , selection of 

15 report sorts customization tab 1588 will present the 

user with a sorts customization screen such as example 
screen display 1599 presented as shown in Figure 
12 (e) . The sorts tab enables the user to specify 
columns to be sorted in an available sorts selection 

20 field 1591, whether totals are to be made, whether the 
column data to be provided is in ascending or 
descending order, tor example, as provided by 
selection of buttons 1592, shown in Figure 12(e). In 
the preferred embodiment, the Report Manager provides 

25 the customer with the ability to specify select 

columns as primary and secondary sorts. The user may 
specify additional secondary sorts in addition to the 
default sorts. For example, the user may provide the 
following sorts: for a Longest Call Report, a primary 

30 sort is Number of Minutes in descending order. For a 
Most Expensive Call Report, the primary sort is 
dollars in descending order. 

Referring back to exemplar screen shown in 
Figure 12 (b) , with regard to the access customization 

35 options, the user is enabled to specify or change an 
accounting "IDACC" code or supplemental code, by 
selecting field 1575a, and specify or change the 
inbound access type, by selecting field 1575b. For 
example, selection of inbound access customization 

40 presents the user with a web page having an inbound 
access customization screen such as example screen 
display 1601 presented as shown in Figure 12(f). In 
Figure 12(f), depending upon the selected report 
format, the right hand entry field 1604 presents the 

45 user with the following selectable access types: dial 
1, card, dedicated, 800 Remote Access, Direct Dial 
fax, store/forward fax, 800 Business line (highlighted 
in the Figure 12(f)), 800 wide area telecommunications 
service, 800 dedicated, 800 Network Call Redirect, 

50 local, cellular. 

Referring back to exemplar screen shown in 
Figure 12 (b) , with regard to the hierarchy 
customization options, the user is enabled to specify 
or change the billing location by selecting field 

55 1577a. Upon selection of the billing location 

customization option, the user is presented with a web 
page having a customization screen such as example 
screen display 1603 presented as shown in Figure- 
12 (g) . In Figure 12 (g) , depending upon the selected 

60 report format, the right hand screen presents the user 
with three tabs: a corporations tab 1607, a search 
tab, 1608, and, a selected items tab 1609. When 
selected, the corporations tab 1607 enables the user 
to add or remove a corporate ID to/from a billing 
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location hierarchy in the entry field 1610. A search 
of corporate IDs may be performed by selecting the 
search tab 1608, and items that have been selected may 
be displayed in a field (not shown) presented by 
5 selection of the selected items tab. Likewise, 

referring back to exemplar web page screen shown in 
Figure 12 (b) , with regard to the geographic 
customization options, the user is enabled to specify 
or change the billing location by selecting field 
10 1577a. Upon selection of the billing location 

customization option, the user is presented with a web 
page having a customization screen such as example 
screen display 1611 presented as shown in Figure 
12 (h) . 

15 In Figure 12 (h) , depending upon the selected 

report format, the right hand screen presents the user 
with three tabs: a countries tab 1612, a search tab, 
1613, and, a selected items tab 1614. When selected, 
the countries tab 1612 enables the user to select, add 

20 or remove a country that may be a subject for 

reporting as provided in the entry field 1620. A 
search of countries may be performed by selecting the 
search tab 1613, and items that have been selected may 
be displayed in a field (not shown) presented by 

25 selection of the selected items tab 1614. 

Referring back to exemplar screen shown in 
Figure 12 (b) , with regard to the notification 
customization options, the user is enabled to specify 
report notification by paging, by selecting field 

30 1579a, and, report notification by e-mail, by 

selecting field 1579b. Upon selection of the paging 
notification option, the user is presented with a web 
page having a customization screen (not shown) 
presenting the user to select or enter that user's 

35 page number, PIN number and a paging message 
description. Upon selection of the e-mail 
notification option, the user is presented with a web 
page having a customization screen (not shown) 
presenting the user to select or enter that user's e- 

40 mail address. 

As mentioned above with respect to Figure 10, 
the Report Requestor client application 212 gains 
access to the metadata stored at the Report Manager 
server 250 through messaging. Particularly, as 

45 hereinafter described, a message generated by the 

Report Requestor in accordance with the user request 
is first received by the report manager proxy 250'. 
In the preferred embodiment, the report manager proxy 
comprises a set of tools in the form of reusable 

50 objects, preferably written in C++ code, or the like. 
For example, a parser object tool is employed to 
decompose the Metadata messages sent by the report 
requestor 212 to validate the message. If errors are 
found in the Metadata input, the RM will return an 

55 error message to the requesting client. If the 

Metadata passes the validation tests, the request type 
is then determined and the appropriate service will be 
invoked after which a standard response is sent back 
to the requesting client. 

60 The Report Manager 250 implements stored 

procedures to translate the message, perform the 
request, and send the information back to the Report 
Requestor 212 which uses the metadata to determine 
what a standard report should look like, the 
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customization options the user has, and the types of 
screens that should be used for the various options 
(i.e., single selection, multiple selections, etc.). 
It is understood that the selection of 
5 available standard template reports is based on the 
user' s entitlements . 

The following types of metadata requests and 
responses that may be generated by the StarWRS Report 
Requestor 212 and Report Manager 250 components 

10 include: 1) Get/Send report template list (GRTL/SRTL) - 
which request enables retrieval of the list of all 
standard report templates for all products and is used 
only to obtain general report information, e.g., 
report title, description, etc.; 2) Get/Send report 

15 template detail (GRTD/SRTD) - which request retrieves 

the details of a specific standard report template; 3) 
Get/Send user report list (GURL/SURL) - which request 
retrieves the list of all user reports for the report 
format selected from a user report table and is used 

20 only as a request for general report information, 
e.g., report title, status, etc.; 4) Get/Send user 
report detail (GURD/SURD) - which request retrieves the 
details of a specific user's report; 5) Add report 
definition/Acknowledgment (ARD/ARDA) - which requests 

25 addition of a user -created report to a user report 
table. If the report is a scheduled report, this 
request is also communicated to the fulfilling server 
at the time the report is due; 6) Delete report 
definition/Acknowledgment (DRD/DRDA) - which request 

30 deletes a user- created report from the user table; 7) 
Copy report def inition/Acknowledgment (CRD/CRDA) - 
which request creates a duplication of the report the 
user is editing (other than the report title) and 
creates a new report ID for it; 8) Update Reporting 

35 Schedule/Acknowledgment (URD/URDA) - which request 

updates the scheduling information on a report without 
having to send a Delete and Add request; and, 9) Get 
Pick Li st /Acknowledgment (GPL) - which reguest enables 
the Report Requestor 212 to get a pick list provided 

40 by StarOE server. 

Having described the functionality of 
selecting and/or generating a report and customizing 
it, reference is now had to Figure 11(b) which 
describes the next step 350 of presenting the user 

45 with report run and save options. Particularly, in 
the preferred embodiment { as shown in each of the 
customization screens (Figures 12 (b) - 12 (h) ) , the user 
may select a save and exit option, depicted in Figure 
12(b) as button 1562 or a save and run option, 

50 depicted in Figure 12(b) as button 1563. In either 

scenario, an WRSEdit object enables a WRSScnMgr object 
to save the report to the RM server. The WRSScnMgr 
object launches each screens save method which 
communicates with the DataManager object to place the 

55 screens data in its corresponding WRSNode. Once all 
of the WRSNode objects have been updated, the 
WRSScnMgr object calls the DataManager object's 
SaveReport method to build a hash table to contain all 
of the report's data. The CommunicationManager 

60 utilizes the RptManagerMsg object to create the ARD 
metadata message from the hash table, the 
WRSCommWrapper for direct communication with the 
backend, and the WRSReportManagerUtilParser to handle 
any errors thrown by the server. The Report Manager 
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creates the Dispatcher object, and utilizes the 
services of the RMParser class and validation objects. 
Upon determining that the client has sent a valid 
message, the appropriate member function is invoked to 
5 service the request. The response is built inside the 

esgl wrapper function after obtaining the necessary 
information through the stored procedure from the RM 
database. The Report Manager creates the 
RMServerSocket object and sends the ARDA message back 

10 to the client. When a report is submitted the 

selected report type and reporting criteria are sent 
to the Report Manager. 

As illustrated in Figure 11(b), at step 355, in 
reference to user selection of a Save and Run report 

15 option, the report is marked as scheduled and saved in 
the Report Scheduler server 26 0 via the report 
Manager. Subsequently, as indicated at step 360, the 
Report Scheduler server 260 sends the ARD message to 
the fulfilling server which queues the report and runs 

20 the report at the specified time(s), as indicated at 
step 3 65. 

With respect to the process for generating a 
report for StarODS priced call detail data, and, for 
TVS unpriced call detail data, generally, whether the 

25 report is to be currently run for immediate ad hoc 
reporting, or, is scheduled for normal scheduled 
reporting, the following sequence of operations, as 
indicated at steps 370-395, Figures 11(b) - 11(c), are 
performed: First, in response to receipt of the ARD 

30 message, e.g., submitted to the fulfilling server by 
the Report Scheduler, the fulfilling server completes 
the report and compresses the report /data, as 
indicated at step 370. Then, the report/data is 
"pushed" , implementing FTP, to the fulfilling server's 

35 directory on the Inbox server 270, as indicated at 

step 373. Each application server, e.g., TVS server 
550 (Figure 10) , is responsible for generating unique 
file names within their directory on the Inbox server 
270. For example, the following directory and file 

40 naming conventions used for reports generated by the 
TrafficView server are labeled inbox\f iles\tvs with 
text files having the suffix * . txt or *.txt_^zip 
(compressed) , and comma separated files having a 
suffix *.csv or *.csv_zip (compressed) . The 

45 fulfilling server then verifies that the FTP process 

was successful, as indicated at step 376, and, at step 
379, a notification is sent by the fulfilling server 
to the Report Manager to notify the Report Manager 
server 250 of the location of a scheduled report. 

50 This is accomplished by using a "NRL" metadata 
message . 

In the preferred embodiment, the NRL message 
received by the RM server 250 includes parameters 
verifying whether or not the FTP process was 

55 successful. If it was successful, then the fulfilling 

server messages the Inbox that the file has been 
transmitted successfully by transmitting the report 
name (filename) and location. When the fulfilling 
server encounters a problem executing a report, a 

60 notification is sent to the Report Manager. 

Particularly, an error flag is placed in the status 
field of the User_report by the Report Manager which 
is displayed to the user during Report Request. The 
error message description will be placed m a text 
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file and FTP ' d to the fulfilling server's report 
location on the Inbox server (e.g., \inbox\f iles\tvs) 
by the fulfilling server. 

Referring to Figure 11(b), step 379, once the 
5 RM server 250 has received the NRL message from the 

fulfilling server, it verifies the file's presence, as 
indicated at step 382. The RM server 250 then builds 
a metadata file, e.g., by compressing the appropriate 
metadata (for displaying the report) into a . MTD file, 

10 as indicated at step 385. This .MTD file is utilized 
by the Report Viewer to know how to display the 
report. The Report Manager server creates a file 
including the metadata using the same file name as the 
report/data file, but having the following suffix: 

15 *.mtd or *.mtd__zip indicating a metadata or compressed 

metadata file, respectively. 

Once the metadata file corresponding to the 
requested report is built by the Report Manager, the 
RM ftp's the .MTD file to the Inbox server, as 

20 indicated at step 388, Figure 11(c). The RM server 
additionally updates the User_report table status 
field with a status "C" indicating completion, as 
indicated at step 391. 

Once the Report Manager has updated the status 

25 field, the RM server 250 then adds the report to the 

Inbox server, as indicated at step 393. 

In an example metadata message indicating to 
the Inbox server that an unpriced TVS fulfilling 
server report is available, the RM server supplies a 

30 metadata "A" message to the Inbox indicating the FTP 
file location. Via the report viewer, the report is 
now available for viewing, downloading, saving, or 
printing by the user. 

Particularly, as shown in the exemplary nMCI 

35 home page in Figure 5 (a) , the nMCI Interact "Message 
Center" icon 81 may be selected which will cause the 
display of a web page including the message center 
dialog box 1510 such as shown m Figure 13 (a) . From 
the dialog box 1510, a user may select from among 

40 three tabs, a news tab 1512, a reports tab 1513 and a 
data tab 1514. Selection of the reports tab 1513 
enables the retrieval of both a data file and a 
metadata file from the Inbox Server corresponding to 
those reports that have been run and available for 

45 customer viewing. Information provided for display by 
the message center display 1510 is provided by the 
User_table which keeps track of the status of all 
reports for a particular user. Particularly, by 
double -clicking a chosen report, a report viewer 

50 application is enabled to display the chosen report on 
a web-page. Figure 13(b) illustrates an example web- 
page presenting a text viewer screen 1515 enabled by 
selecting the highlighted report 1514 in Figure 13 (a) . 

55 Referring back to Figure 10, the Report Viewer 

215 interfaces with the user's Inbox 210 for 
presenting to the customer the various type of reports 
received at the Inbox. Preferably, all Report 
Requestor and Report Viewer applications communicate 

60 with the RM server 25 0 through the use of the common 
object communication classes. 

It should be understood that fulfilling servers 
such as the Broadband, and Toll Free Network Manager 
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50 0, and StarODS 400, Report Scheduler server, and any 
other back-end or fulfilling servers (not shown) , send 
report results and event notifications to the inbox 
server 270. The fulfilling servers, and Report 
5 Manager server may communicate to the inbox server 27 0 
by making requests to the inbox proxy 270 The 
proxy, generally waits for a request from an 
application and then services the request. 

The inbox proxy's main responsibility is to 

10 process requests by either handling them internally 

within the inbox proxy 270' or forwarding them to the 
inbox server 27 0, and then responding back to the 
client (i.e., the fulfilling servers in this case). 
In order to maintain secure connectivity throughout 

15 the system, the inbox proxy 270' uses the application 

program interfaces (APIs) provided by the "networkMCI 
Interact" supporting different types of data transport 
mechanisms: synchronous transaction; asynchronous 
transaction; and, synchronous bulk transfer. The 

20 transport mechanisms are implemented as sockets 
message protocol, and the proxy handles its 
conversation processing on a thread or process per 
conversation basis for servicing multiple simultaneous 
clients . 

25 As an alternative to the transports above, the 

inbox server 270 offers direct File Transport Protocol 
(FTP) "put" for very large transfers in order to 
alleviate some of the network server loads. The 
fulfilling servers 400, 500 with large data transfers 

30 typically use the common shareware compression format 
ZIP which is also PKZIP compatible. Alternately, the 
fulfilling servers 400, 500 distributing information 
via the inbox may "put" the data to the inbox and 
defer zipping until after the inbox receives the data. 

35 As described, the fulfilling servers, when 

placing the data in the inbox, notify the report 
manager server 25 0 they are adding new data in the 
inbox. The report manager 250 then retrieves and FTPs 
the appropriate metadata associated with the new data 

40 in the inbox, notifying the inbox of the new additions 
to the inbox, i.e., the new data and the associated 
metadata. The metadata is then stored in the inbox 
server database 273 along with the report results. 
Thus, if the metadata is required to be changed, it 

45 does not interfere with the information needed to 
display the reports included in the inbox. 

Particularly, as shown in Figure 16, the Inbox 
server 270 interface with the Inbox Client 210 
supports messaging that enables the User to remove an 

50 item from the Inbox, e.g., delete a report, or, to 
delete all items from the Inbox, e.g., for a 
particular Enterprise and User ID as well as other 
associated reports. The parameters used in the 
metadata messaging between the Inbox client and the 

55 Inbox server include, particularly, the List "L" 

message which is a synchronous request for a list of 
all Inbox items for a specific user. The Inbox fetch 
"F" function is a bulk transfer request that enables 
bulk transfer of the requested file to the Inbox 

60 client. 

Referring back to Figure 12 (b) , after editing 
or modifying an existing report, the user may simply 
select to save the report and exit. In this case, the 
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ARD message is sent from the Report Requestor client 
to the RM server and is saved in the RM inventory 
database for subsequent execution. Consequently, the 
report is flagged as incomplete in the User__table and 
5 may not be run until a run option for that report is 
chosen. Otherwise, the report may be immediately 
scheduled if the user selects the save and run button. 

As described, Metadata messaging is used 
throughout the various components of the StarWRS 

10 system 200. The format of an interface message that 

is sent to the Report Scheduler server is identical to 
the format as the interface messaging format returned 
by the RS server 260. Thus, in the case of automatic 
recurring reports, a variation of the process outlined 

15 in Figure 11(b) occurs at step 360, whereby the ARD 

request is instead sent from the report scheduler to 
the fulfilling server at the programmed frequency. 
Particularly, when a report is required to be run, the 
Report scheduler server 260 (Figure 10) sends an ARD 

20 request to the fulfilling server in a metadata message 
format having parameters. Upon processing of the 
metadata message, the fulfilling server wxll respond 
to the report Scheduler with an acknowledgment or the 
command, and the process outlined in Figures 11(b) and 

25 11(c) is executed. 

The Report Scheduler server 260 is additionally 
capable of updating the User__ report status table and, 
preferably, is provided with a tracking mechanism for 
tracking the scheduling of user reports. If the 

30 report is an Ad hoc report, it is marked as inactive 
in the user report table once the status is complete. 



StarODS 

As mentioned, the StarODS data management tool 
35 of the integrated suite of telecommunications network 
applications comprises a back-end architecture 
providing customers with priced reporting data 
pertaining to usage of their telecommunications 
networks . 

40 In Figure 14(a), there is shown the high-level 

logical approach of the StarODS data management system 
4 00 integrated with the StarWRS component 2 00 of the 
nMCI Interact architecture. Generally, the data 
management system 400 of the invention, referred to 

45 herein as "StarODS" , provides customers with priced 
reporting data pertaining to telecommunications 
services. Although the description herein pertains to 
priced billing data, it should be understood that the 
principles described herein could apply to any type of 

50 reporting data. Through StarWRS web -based reporting, 
the StarODS system provides priced reporting data and 
implements a DataMart approach for maintaining the 
data used for customer reporting. StarODS stores and 
incrementally processes customer's priced data 

55 included in call detail records, and loads this 

processed data in Data Marts. From these data marts 
customer's priced reporting data may be provided- to 
customers on a daily basis via the StarWRS reporting 
system. 

60 For priced reporting data, report categories 

from which a variety of reports can be generated 
include: a) Financial category - for providing priced 
data reports relating to longest calls, most expensive 
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calls, Off Peak Calls, payphone report, usage summary, 
calling card summary, and area code summary for Toll 
Free, VNET, Vision, and CVNS customers; b) Marketing 
category - for providing priced data reports relating 
5 to country code summary, state summary, frequent 

numbers, frequent area code summary, frequent state, 
and frequent cities; c) Telecommunications category - 
for providing priced data reports relating to call 
duration summary, IDACC/Supp Code Summary and Call 

10 Access Summary for Toll Free, VNET, Vision, CVNS 
customers; d) Call Center report category- for 
providing priced data reports relating to most active 
toll free numbers, Hourly Distribution, Day of Week 
Distributions, state summary, and country code summary 

15 for their Toll Free, VNET, Vision, CVNS customers; e) 
Monitor Usage - for providing priced data reports 
relating to longest calls, most expensive calls, most 
active calling card and most active toll free numbers 
for their Toll Free, VNET, Vision, CVNS customers; f) 

20 Analyze Traffic - area code summary, country code 

summary, state summary, range summary, city summary, 
frequent numbers, payphone report, usage summary, 
calling card summary, IDACC/Supp Code Summary, Day of 
Week Distributions, Hourly Distribution, Call Access 

25 Summary and review calls; and, a g) Check Calling 
Frequencies category - for reporting on frequent 
numbers, frequent area code, frequent country codes, 
frequent state and frequent cities. 

Figure 14(a) illustrates the primary components 

30 implemented in the StarODS priced reporting data 

management component 400. As shown in Figure 14(a), a 
first traffic feed 405 provides raw call detail 
records from external network switches, translates and 
sorts the data into billable records for input into 

35 two systems: a Commercial Billing system ("NCBS") 

mainframe server process 410 for pricing the records 
at tariff for customers subscribing to, e.g., MCI's 
VNET and Vision telecommunications products; and, a 
toll-free billing server process 420 for pricing the 

40 records at tariff for customers subscribing to toll- 
free telecommunications products. A common data 
gateway component 43 0 including a mainframe extract 
process 435 and a data harvesting process 440 receives 
these inputs on both a daily and monthly basis for 

45 processing. Particularly, the mainframe extract 

process 435 creates a selection table including all 
subscribing customers, compresses files for 
transmissions and extracts priced reporting records 
from the runstreams. The harvesting process 440 is 

50 responsible for performing data validations, 

filtering, data translations, data grouping, data 
routing, and data logging functions. According to a 
dimension table based on data within selected BDRs, 
the harvesting process applies business rules to the 

55 data, cleanses the data, transforms the data, creates 
load files for DataMarts and compresses files for 
storage in the DataMarts. The harvesting component 
440 may additionally perform an aggregation function 
for supporting long term storage and rapid access of 
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data for customer reporting, and performs trigger 
actions/events based on predefined criteria. 

Additionally, as shown in the Figure 14 (a) , 
other external systems and applications may interface 
5 with the common data gateway component 43 0 including: 
Cyclone Billing system 422a and Concert Virtual 
Network Services 422b which provide additional billing 
detail records; and, a calling area database 425 which 
provides geographical reference information, i.e., 

10 identify city, state and country information. 

After the data has been processed in the 
Harvesting component 440 it is input to an Operational 
Data Store component ("ODS") 450 that stores the 
billing detail records and dimension tables as a data 

15 model. This ODS layer 450 is comprised of all data 

harvested from all applications in the data harvesting 
layer 430, and feeds report - supporting DataMarts 470 
in a manner which supports customized data access. 
The Datamarts may be engineered to pre-process data, 

20 create aggregates, and otherwise perform 

transformations on the data prior to DataMart loading 
465 in order to implement a defined data model, e.g., 
star schema key structures, fact and dimension tables 
depicted as block 460. In the preferred embodiment, 

25 as shown in Figure 14(a), the ODS 450 includes 

multiple datamarts 470 each for storing and retrieving 
daily and monthly priced data on a periodic basis. It 
primarily is responsible for hosting highly current 
data, typically at least 72 hours old. In accordance 

30 with customer - reporting needs, data marts 47 0 are 

partitioned in accordance with partitioning schemes 
which, in the invention, is based on customer- ID. 
Particularly, each DataMart is engineered for 
servicing specific customers or specific product sets, 

35 as well as engineered for the specific requirements of 
the customer/product such as high insert activity, 
heavy reporting requirements, etc. As data is 
volatile and changing and may not produce consistent 
results for the same query launched at multiple times, 

40 ODS is engineered for high performance through 
appropriate storage technologies and parallel 
processing. Although not shown, a common data 
warehouse is provided in this ODS layer that is 
responsible for performing storage, retrieval and 

45 archiving of data, typically of relaxed currency 

(e.g., more than 24 hours) and is targeted at trend 
analysis and detection. In the preferred embodiment, 
the datamarts utilize an Informix database in a star 
topology. 

50 As described herein, from the data included in 

these data marts, one-time or recurring priced data 
reports are available for reporting through the NMCI 
Interact StarWRS reporting system 200. 

Additionally, the ODS component 450 includes a 

55 Decision Support Server ("DSS") reporting engine 

component 475 that performs the following functions: 
1) receives various customer report requests from the 
StarWRS GUI Report Requestor component and accordingly 
generates database queries; 2) routes the query to the 
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appropriate data marts 47 0, data warehouse or 
operational data store; and, 3) responds to the 
requestor with a formatted result set. The DSS server 
475 may also perform cost estimation, agent 
5 scheduling, workflow broadcasting interface, and 
transaction logging functions. In the preferred 
embodiment, the DSS 475 is a cluster of DEC (Digital 
Equipment Corp.) UNIX 8400 servers running Information 
Advantage® software accessing an Informix database, 

10 e.g., Informix Dynamic Server V.7.3. database product, 
distributed across multiple Data Marts. 

In accordance with the invention, the primary 
function of the DSS 475 is to generate priced billing 
report data in accordance with the customer's request 

15 which is received from the StarWRS reporting component 
as a metadata message. To accomplish this, the DSS 
interfaces with two StarWRS systems: Report 
Manager/ Scheduler 2 50, and Inbox 27 0, as shown in 
Figure 14(a) . As described herein, the Report 

20 Manager/Scheduler formats the customer's request in 
accordance with a defined set of rules and sends a 
metadata request message to the DSS. The DSS 475 
reads the customer's metadata descriptions of the type 
of priced data report requested by a customer, 

25 translates the metadata into database queries, and 
implements commercial off-the-shelf ("COTS") tools 
such as Information Advantage's Decision Suite™ to 
generate SQL queries, and run the queries against the 
data in the DataMarts. Afterwards, the query results 

30 are formatted by a formatter process into a form 

readable by StarWRS report viewing components, and the 
completed reports are transmitted to the directory of 
the customer's Inbox, e.g., via FTP. 

In the preferred embodiment, a publish- and - 

35 subscribe communications tool 3 50 such as Talarian 
SmartSockets™ messaging middleware is used to 
coordinate report requests transmitted from the 
StarWRS report Manager to DSS, and report completion 
notification from DSS to the StarWRS Report Manager. 

40 The Report Manager formats the customer's request in 
accordance to a defined set of rules and sends the 
request to the DSS as a Talarian message with the 
Report Manager 2 50 maintaining the Talarian Sender 
program, and the Decision Support Server 475 

45 maintaining the Talarian Receiver program. Messages 
are sent with guaranteed message delivery ( "GMD" ) , 
thus assuring all request data sent by RM is received 
by the DSS. As known, Talarian messaging middleware 
defines a message as types and subjects. A message 

50 type is a structure that defines the format of the 
message. Message subjects are subsets of message 
types and describe messages by which Talarian 
receivers can subscribe. Conversely, message subjects 
describe messages by which Talarian senders publish. 

55 In the application programming interface "API", 

the RM server 250 publishes the message to the 
Decision Support Server in response to its receipt of 
a report request. Similarly, a DSS/Inbox API is 
provided to manage FTP transmission of completed 

60 customer report files including: error handling, retry 



WO 99/15979 



-49- 



PCT/US98/20170 



logic, and the ability to maintain the file name and 
location of where report files are stored. 
Particularly, the DSS/lnbox API sends the report file 
to the inbox (Figure 14(a)). 
5 In the preferred embodiment, the DSS 

architecture is transparent to the Report Manager 
which publishes Talarian messages to which the DSS 
will subscribe- More particularly, an RTServer 
process located in the RM is provided for maintaining 

10 connections, implementing a report request queue 490 

for ensuring guaranteed message delivery, and tracking 
the success of all messaging operations. In addition 
to the tokenized character string request message 
which specifies report type, filters, and any customer 

15 request- specif ic information, RM server provides 
additional fields as part of the Talarian request 
message including: a Corp_ID, Priority, and RequestlD. 
Corp__ID allows the DSS to route the request to the 
appropriate data store without having to invoke a 

20 parser. Data are partitioned on Corp__ID in the ODS 
database warehouse. Request_id is used to send back 
an ARDA failure message, in the event of an invalid 
message. The Priority field allows DSS to pickup the 
next high priority request from a queue of non- 
25 processed requests, without invoking the parser. 

Figure 14 (b) illustrates the implementation of 
an Information Advantage® Interface Object ("IAIO") 
472, which is a process running in the DSS 475 for 
performing the following functions: 1) publishes and 

30 subscribes Talarian messages to Report Scheduler; 2) 
parses the request metadata ARD (Add Report 
Definition) message received from the RS 260; 3) 
publishes an ARDA (Add Report Definition 
Acknowledgment) ; 4) populates a request table 493 with 

35 total, sub -total and sort information according to the 
received report request; 5) transforms the ARD tokens 
from the metadata request into an overlay file 492 
which is a text file that is submitted to IA's 
Decision Suite™ process to generate the corresponding 

40 SQLs; 6) updates a Request Status table 4941 with 

appropriate status, e.g., process complete, failed, in 
progress, etc.; and, 7) if a failure occurs, it 
updates an error log (not shown) . 

More particularly, in view of Figure 14 (b) , ARD 
45 metadata request messages are received into the ODS 

system via arbitrator processes which are responsible 
for routing the request message to the appropriate ODS 
database according to a Corp/ODS mapping table (not 
shown) . 

50 In Figure 14 (b) , a Talarian receiver, referred 

to herein as a Talarian Interface Object ("TIO") 350, 
is a process that receives the Talarian message, 
manages the GMD functionality, and posts updates to 
the request table 493 and request status table 494. 

55 The ODS Request table 493 is the table maintained for 
the purpose of holding specific report request 
information from the received ARD message, and, the 
Request Status table 494 tracks the status of DSS 
processes for the current request. As further shown 
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in Figure 14 (b) , the receiver 350 inserts the message 
received from an arbitrator into the request table 49 3 
and request status table 494 along with the priority, 
timestamp and status fields. The request status table 
5 resides on the ODS database and the messages are 
stored in the queue to provide queuing, log and 
tolerance from the failures. To determine the pending 
messages to be processed, a status field and 
history_stat flags are used. 

10 As further shown in Figure 14 (b) , in operation, 

the Information Advantage® Interface Object ( "IAIO" ) 
472 reads the status table 494 for new entries. When 
a new entry is posted, it invokes a parser process 
495, for parsing the received report request ARD 

15 message, and generates an overlay text file 492 
comprising tokens corresponding to the requested 
report format and data descriptions . An SQL engine 
generator, e.g., Decision Suite™, receives the overlay 
file 492 and performs the following functions: 1) 

20 generates SQL; 2) submits the SQL to the appropriate 
datamart (ODS database); 3) generates a Report file 
with a * . txt extension; 4) updates Request Status 
table 494 with appropriate status; and, 5) if a 
failure occurs, updates the error log. Following 

25 generation of the *txt file, a sort process is invoked 
to perform the following functions: 1) reads the 
Request table 390 for column (s) on which to sort the 
Report; 2) reads the * . txt file; 3) sorts the * . txt 
file and generates two files: i. a file with a *.hdr 

30 extension which file contains the header information, 
consisting only of only column id's, and, ii. a file 
with a *.data extension which file contains sorted 
data provided in the * . txt file and is the body of the 
report; 4) it further updates the request status table 

35 with a 'success' or 'failure 7 code; and, 5) if a 
failure occurs, updates the error log. 

Continuously running FTP, NRL and ARDA 
processes are provided to take appropriate actions in 
accordance with the entries in the request status 

40 table 494. For example, an FTP process performs the 

following functions: 1) reads the status table 493 for 
entries ready to be sent to the Inbox and FTP'S the 
.csv or . txt to the inbox 270; 2) Determines success 
or failure of file transfer; 3) Updates the Request 

45 Status table 494; and, if a failure occurs, updates an 
error log. The NRL (Notification of Report Location) 
process performs the following functions: 1) reads the 
Request Status table 494 for any success status or 
failure of any process; 2) Invokes a receiver process 

50 with appropriate status and file location populated in 
the NRL; and, 3) If failure occurs, updates the error 
log. The end- to- end process 600 from a priced report 
request to report delivery is shown in Figures 15(a) - 
15lc) . 

55 Assuming successful user logon and 

authentication, as described herein, the first step 
602 of Figure 15(a), indicates that a user has opened 
the report requester dialog box from the nMCI Interact 
home page (Figure 5 (a) ) by selecting the Report 

60 Requestor icon 83. 
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Using metadata messaging, the StarWRS Report 
Requester retrieves an available report list 
(including user defined list) from StarWRS Report 
Manager, as indicated at step 605. This process 
5 entails invoking a Communication Manager object to 
communicate with the RM server in order to obtain a 
SURL metadata message, as described. 

Next, as indicated at step 610, the Report 
inventory for the specific user is loaded and 

10 displayed for the user on the user report request 

display screen, enabling the user to select a report, 
as indicated at step 612. Then, at step 615, the 
selected report is retrieved from StarWRS Report 
Manager and displayed in the manner as described. 

15 Then, as indicated at steps 618 and 620, the 

user selects a product, including phone numbers and 
geographic locations, etc, and enters criteria, i.e., 
reporting interval and frequency, if a new report is 
desired. Specifically, when the user selects a report 

20 from the Inventory List or a new report, an WRSEdit 

Screen is launched to provide the editing capabilities 
which are available for the Report format, as 
described. 

Once a report is created the user may save the 

25 report request, e.g., by clicking a "Save and Exit" 

button, or submit the request, as indicated at step 
625, e.g., by clicking a "Save and Run 7 ' button. When 
a report is submitted the selected report type and 
reporting criteria are sent to the Report Manager. As 

30 indicated at step 628, the RM creates the metadata 

request for which the DSS has a predefined interface. 
The metadata request is submitted by StarWRS Report 
Requester to a COTS software module, e.g., such as 
provided by Information Advantage® which module is 

35 used for the generation and execution of SQL queries 
and retrieval and formatting of the results. 
Particularly, the metatdata requests are transmitted 
via an interface with the Talarian Smart Sockets 
product and a header is built for each report request 

40 including the CorpID and Enterprise information which 
is used by the IAIO to select the proper DataMart as 
the target for the query. At this time, the report 
requestor additionally creates an entry in a RM table 
to track the progress of the request. RM communicates 

45 with the StarODS using Talarian Smart Sockets® which 
creates a header comprising the product and other 
information, and controls the delivery of the report 
request. Smart Sockets guaranteed messaging feature 
automatically routes the call and repeatedly tries 

50 until the delivery is successful. 

Next, as indicated at steps 63 0 and 632, the 
DSS receives the request and acknowledges receipt. 
Specifically, when the request is received it is first 
validated with StarOE to ensure that the user is- 

55 entitled to receive information about the selected 

product corp and number (s). Once the request passes 
validation, the DSS IAIO reads the header to determine 
which Data Mart will ultimately be queried. It then 
parses the metadata into a format which the COTS 
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software can readily convert into an SQL statement, as 
indicated at step 635, Figure 15(b), and adds the 
report to the DSS report queue based upon type (Daily, 
Weekly, Monthly, Adhoc) and associated DataMart, as 
5 indicated at step 638. It should be understood that 
at this point, the request has been flagged as 
submitted in the RM database, as indicated at step 
633 . 

From this point forward, DSS activity is 

10 controlled by a control process and progress or errors 
are logged internally in the DSS system. This control 
process includes logic enabling the prioritization of 
report requests and application of rules defining the 
order in which they should be executed. Thus, at the 

15 appropriate time, depending on the type or report, 

reporting period and other parameters, the Information 
Advantage query engine selects the report from the 
queue, as indicated at step 640, which action is 
logged in the report status table (Appendix I) as 

20 indicated at step 642. The SQL statement is then 

built by Decision Suite™ and routed to the appropriate 
data mart for execution in the manner as described 
herein, as indicated at step 643. The query engine 
generates the SQL statement from the metadata and 

25 executes the report which action is logged in the 

report status table as indicated at step 645. Next, 
as indicated at step 648, the query results are 
returned, and, a post- SQL formatting process is 
invoked. 

30 More particularly, the report result set from 

Decision Suite™ is input to a Formatter module which 
performs various report result transformations 
including: 1) Converting of column headers generated 
by Information Advantage into appropriate column ids 

35 that are recognizable to the StarWRS client viewer 

functionality (as indicated at step 650) ; 2) Provide 
subtotaling for specific requested "subtotal by" 
columns in the format required by the StarWRS client 
interface (as indicated at step 653) and provides 

40 report -based totals as requested by customer; 3) 

converting binary stream data file to ASCII text file 
(as indicated at step 655) ; 4) implementing Replace 
logic, e.g., replacement of "TAB" delimiters with 
appropriate "Comma" field delimiters (as indicated at 

45 step 657); 5) implementing Repeat/Padding logic, i.e., 
identifying compressed columns/values and 
decompressing (or repeating) the values that were 
compressed; 6) providing alphanumeric translations for 
any encoded data elements returned in the result set 

50 data file (as indicated at step 659) ; and, 7) adding 

new computed/derived columns, e.g., percents, averages 
of column data values, etc., as requested by customers 
on specific reports. 

After formatting the report, as indicated at 

55 step 660, a message is sent to the control process to 

update the request status table 494 (Figure 14 (b) ) . 
It should be understood that, if a failure occurs 
during formatting, the error log is updated and a 
status message sent to the request status table 494, 

60 as well. Then, as indicated at step 665 (Figure 

15(c)), the formatter creates a *.csv (Comma Separated 
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Value) or . txt file, gives the file a unique name and 
saves the file. Preferably, a *.csv is the file 
generated if the report is successfully generated. As 
indicated at step 668, the *.csv report/data file is 
5 then "pushed" , implementing FTP, to the StarODS 
server's directory on the Inbox server 270. 

Finally, as indicated at step 670, once the 
file has been successfully transferred to the Priced 
reporting directory on the Inbox server, and the 

10 request status table 494 appropriately updated at step 
675, an NRL message is sent to the RM Server 250 
notifying it of the report file name and location in 
the Inbox, requestor information, and if the transfer 
was successful. This is accomplished by using a "NRL" 

15 metadata message with a corresponding NRLA message 

sent back to the DSS. Report Manager is subsequently 
notified of the successful completion of the report 
and the report request is marked as completed in the 
RM database. If the report is a recurring report, it 

20 is not marked as complete. After the control process 
updates the report status table, the Report Manager is 
notified that the report is complete and the Inbox 
server notifies the user that report is ready. 

A user may subsequently retrieve the report by 

25 clicking on the message center icon 81 from the home 

page of Figure 5 (a) which will present to the customer 
a list of all the available reports. To view a report 
the user selects the report and, the report metadata 
and the appropriate viewer are downloaded to the user 

30 (client) workstation. 



TVS 

As mentioned, the traffic view system ("TVS") 
500 of the present invention comprises a Traffic View 

35 Server 550 which functions to store network call 

detail records (CDRs) and statistics, generate reports 
and deliver reports and/or call detail to the customer 
via the StarWRS Web Reporting System, and, supplies 
on-line customer access to call detail and hourly 

40 statistics that aid the customer in Network 

management, call center management and customer 
calling pattern analysis. For real time (unpriced) 
data, statistics are generated for the following 
totals: minutes, attempts, completes, incompletes, 

45 other, dto (direct termination overflow), snort calls, 
didn't wait, didn't answer, tec, and equipment 
failures . 

The process by which the TVS server 55 0 gets 
data is now explained in greater detail with reference 

50 to Figures 18 and 19. As shown, call records are 
created by a network switch 501. An AP (Adjunct 
processor) or Storage and Verification Elements 
("SAVE") platform 502 is co- located with each switch 
and receives all the call records from the switch as 

55 soon as possible after a call disconnects. The 

AP/SAVE sends all the call records to a (Network - 
Information Concentrator (NIC) 503 where records are 
grouped together and those groupings numbered for a 
more efficient network utilization. If the NIC 

60 determines that it is missing a gap in the numbers, it 
will request the AP/SAVE resend that group of data to 
ensure that no data is lost. Should the NIC be 
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unavailable to receive data, the AP/SAVE queues the 
data for later delivery. The NIC 503 receives all 
calls from all switches as soon as possible after a 
call has disconnected (hangs up) and distributes 
5 records to clients that match a certain criteria. 

A generalized statistics engine (GSE) component 
504 receives all records that are considered to be a 
toll free (800/8xx, etc) call from the NIC and also 
employs the same sequencing of groups of records to 

10 ensure that no data is lost. Should the GSE be 

unavailable, the NIC will queue the data for later 
delivery. The GSE component 504 further filters toll- 
free calls to only process calls that match a 
subscriber list which is maintained by an order entry 

15 OE process on the GSE (not shown) that accepts add & 

delete requests from TVS via a messaging interface 507 
as shown m Figure 18. The GSE component then formats 
the CDRs, i.e., enhances the call records, from the 
form as originally provided at the switch, into a 

20 normalized form to allow for a common record format 
regardless of the type of switch that created the 
record, or the exact call record type. For example, 
different network switches generate different call 
detail records, e.g., call detail record, enhanced 

25 call detail records, etc., which denote differences in 
toll-free services and features. This type of call 
detail record generated by GSE component is herein 
referred to as a TCR (Translated Call Record) . 

Groups of TCRs are sent from the GSE to TVS via 

30 TCP/IP. When TVS has safely stored that record it 

sends an acknowledgment to the GSE 5 04 so that the GSE 
may dispose of the group. Should TVS not be available 
to receive data, GSE queues data to be sent later. 
As shown in Figure 18, in the preferred 

35 embodiment, initial customer provisioning occurs at 

either the Corporate Order Entry system 223 (CORE) or 
the StarOE server 2 85 component of MCI Interact. 
Particularly, CORE 223 transmits daily to the TVS 
server 55 0 via Network Data Mover (NDM) files which 

40 comprise information about new reports for TVS to 

create, and where to send those reports, e.g., FAX, E- 
Mail, or US Mail. In the NMCI Interact TrafficView 
Server 550, a CORE FEED process 523 provisions reports 
into a reference database 551, and sets up scheduled 

45 reports to work on the next boundary, e.g., hourly, 
daily reports at midnight the next complete day, 
weekly reports at the end of the next week, monthly 
reports at the end of the month, etc. . If this report 
requires Call detail records, as opposed to aggregated 

50 data, a CDR database is selected based on weighted 
values for the existing database. If a request 
contains a toll-free number that has not been 
provisioned with the GSE, a request is sent to the GSE 
to start collecting that toll-free number. This 

55 request is sent by placing a request onto a DMQ queue 

553, and a GSE SEND_OE process 554 is invoked to 

forward the request to the GSE 5 04 via a TCP/IP 
interface. 

As further shown in Figures 18 and 20, in the 
60 preferred embodiment, requests to enable TrafficView 
customers are received in real-time from StarOE 285 
via TCP/IP. Generally, StarOE specifies what general 
categories of reports can be requested for a given 
nMCI Interact subscriber. These categories include: 
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1) reports that only require data aggregation; 2) 
reports that require call detail records to be 
collected; and 3) real-time monitor (RTM) reports. 
This is provisioned into the reference database 551 
5 for future verification of requests from the nMCI 

Interact platform. If a request contains a toll-free 
number that has not been provisioned with the GSE , a 
subscription request is sent to the GSE 504 to start 
collecting TrafficView data pertaining to that toll- 

10 free number. This request is sent by placing a 

request onto the DMQ queue 55 3, and the GSE SEND_OE 

process 554 then forwards this request to the GSE 504 
via a TCP/IP interface. In the preferred embodiment, 
the content and format of an "order entry" message 

15 generated by the TVS server for requesting unpriced 
traffic data from the GSE is provided in Appendix H. 
In accordance with this messaging, the GSE selects all 
TCR's for TVS enabled customers and places them in a 
SAVE storage queue, e.g., Versant or Talarian, for 

20 subsequent distribution to the TVS server. 

As further shown in Figure 18, an input feed 
from the calling area database component 5 08 ("CADB") 
provides the TVS server 550 with reference data 
including state and country information for mapping 

25 NPA/NXX (Numbering Plan Area/ Number Exchange) to city 
name and state code, and, for mapping country codes to 
country names. Data is transported from the CADB 
database 518 to the TVS server via a network data 
mover ( "NDM" ) or FTP via interface 519. 

30 A further input feed from the Global 

Information Repository "GIR" component 511 provides 
the TVS server with International toll-free number 
terminations on a periodic basis. 

From the circuit order management system 

35 ("COMS") component 515, TVS receives three NDM feeds: 

1) a Trunk Type Master feed 516 used in Un-priced 
Reporting to map enhanced voice service/dedicated 
access line (EVS/DAL) information to specific service 
locations; 2) an automatic number identification 

40 ( "AN I " ) feed 517 also used in Unpriced Reporting to 

map EVS/DAL information to specific service locations; 
and, 3) a switch mapping feed 518 to map the switch ID 
(per Network control system) to the billing 
representations of the same switch. 

45 As further shown in the Fig. 18, unpriced data 

collection process begins with the placement of an 
order for unpriced reporting with the customer's 
account team. Specifically, the account team places 
the order in real time using an ordering system 

50 component. In a periodic process, this order 

information is transmitted to OEHubs 224, e.g., via e- 
mail which later inputs the necessary service and 
reporting flags to the StarOE component 285, via 
messaging interface 226. The OEHubs 224 further adds 

55 new customers to the corporate order entry ("CORE") 

system component 223, which provides customer billing 
hierarchy information used by the StarWRS system. The 
new customer hierarchy information is extracted by the 
CORE system 223, and is available for pickup by the 

60 StarOE server 285 via messaging interface 227. The 
StarOE server 2 85 then messages the Traffic View 
Server 550 in real time via TCP/IP that the number has 
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been added for Unpriced Reporting. The TVS 
additionally messages the GSE component 505 in real 
time to immediately initiate the collection of call 
detail for that number, as will be described in 
5 greater detail herein. Due to latency inherent in the 

fulfillment process, customers may select and receive 
daily reports after CDR collection begins. 

In accordance with the invention, a wide 
variety of reports and reporting frequencies are 

10 available. In the preferred embodiment, reports are 
available in hourly, daily, weekly, and monthly 
frequencies. Types of TVS reports that are available 
to customers include: Standard reports; Summary 
reports; Termination Reports; Exception reports; and, 

15 unpriced call detail. For example, Standard reports 
that may be generated from stored Toll Free hourly 
statistics include, but are not limited to: Summary by 
Toll Free Number and Hour which is available in the 
following frequencies (Ad-hoc "A", Daily "D" , Weekly 

20 "W" , and Monthly "M" ) ; Summary by Toll Free Number and 

Date (A, D , W, M) ; Summary by Toll Free Number and day of 
week ("DOW") (A,W,M) ; Summary by Toll Free Number and 
Week (A, M) ; Summary by Toll Free Number and NPA 
(A,D,W,M); Summary by Toll Free Number, Service 

25 Location and Hour (A, D , W, M) ; Summary by Toll Free 

Number, Service Location and Date (A,D,W,M) ; Summary 
by Toll Free Number, Service Location and DOW (A,W,M) ; 
Summary by Toll Free Number, Service Location and Week 
( A, M) ; Summary by Service Location and Hour (A,D,W,M); 

30 Summary by Service Location and Date (A,D,W,M) ; 

Summary by Service Location and DOW (A,W,M) ; Summary 
by Service Location and Week (A,M) ; Summary by Service 
Location, Toll Free Number and Hour (A,D,W,M) ; Summary 
by Service Location, Toll Free Number and 

35 Date (A, D, W,M) ; Summary by Service Location, Toll Free 
Number and DOW (A,W,M) ; Summary by Service Location, 
Toll Free Number and Week (A,M) . The Toll Free 
Summary Reports generally comprise three sections: 
Summary, Incomplete Call Analysis, and Network 

40 Customer Blocked Analysis (other category breakdown) . 
The Termination Summaries include three types of 
termination reports: Toll Free by Location, i.e., 
showing termination summary and incomplete call 
analysis by service location for a specific Toll Free 

45 number; By Location, i.e., by service location across 
all Toll Free numbers terminating to the same service 
location; and, Location by Toll Free, i.e., for a 
specific service location, shows each Toll Free number 
terminating to this location. The originating 

50 NPA/Country Code summary reports provide information 

by NPA and Country for each Toll Free number attached 
to the report. 

Additionally available are what are called Call 
Detail Exception Reports/images which provide 

55 reporting information pertaining to the following: 

Completion Rate and Retry (A,D,W,M); Completion Rate 
and Retry with Queue Abandonment (A,D,W,M); Lost 
Caller and Retry (A,D,M) ; Lost Caller and Retry with 
Queue Abandonment (A,D,M) ; Most Frequent Calling 

60 Numbers (A,D,W,M); Most Frequent Calling NPA/NXX 

(A,D,W,M) ; Most Frequent Calling Country (A,D,W,M). 

The nMCI Interact Exception reports (images) 
includes: Completion Rate and Retry ("A,D,W,M); 
Completion Rate and Retry with Queue Abandonment 
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(A,D,W,M) ; Lost Caller and Retry (A,D,M) ; Lost Caller 
and Retry with Queue Abandonment (A,D,M) ; Most 
Frequent Calling Numbers (A,D,W,M); Most Frequent 
Calling NPA/NXX (A,D,W,M) ; and, Most Frequent Calling 
5 Country (A,D,W,M). The nMCI Interact Exception 

reports (data) includes: Call Detail by Originating 
AN I (A,D,W,M) ; Call Detail by ID Code (A,D,W,M) ; Call 
Detail by NCR Indicator (A,D,W,M) ; Call Detail by 
Originating State (A,D,W,M) ; Call Detail by 

10 Disposition (A,D,W,M) ; Call Detail by Service Location 
(A,D,W,M) ; Payphone Summary (A, M) . Downloadable nMCI 
interact Call Detail reports includes Traffic view 
call detail (available as ad-hoc and daily) and 
Outbound traffic view call detail data (available as 

15 ad -hoc, daily and weekly) . 

As mentioned, via TCP/IP messaging, the TVS 
system 550 receives a request in real-time from the 
nMCI Interact StarOE component 285 to begin collecting 
call detail records for a particular TVS/Unpriced 

20 reporting customer, which number had been previously 
assigned during the order entry process. When a 
customer discontinues Unpriced Reporting for a number, 
this information is entered in StarOE tables where it 
is stored for a predetermined period subsequent to 

25 termination of the number. After the predetermined 
period of time, e.g., seven days, the numbers 
scheduled for service deletion are passed to TVS via 
TCP/IP connectivity in real time. After receiving 
this information, TVS instructs the GSE 504 in real 

30 time to stop collecting CDRs for these numbers. 

Figure 21 illustrates a generalized block 
diagram detailing the internal TVS data acquisition 
processes. As shown in Figure 21, a TVS server 
"GSE__TCR_RCVR" process 564 receives a group of TCR 

35 records from the GSE component 504. The GSE_TCR_RCVR 
process 564 inserts that group into a DMQ 
(DecMessageQueue) queue 553a that provides a 
guaranteed message delivery. Upon successful storing 
of a record into the DMQ queue 553a, the GSE__TCR_RCVR 

40 process 564 sends an acknowledgment to the GSE 

component 504 so that it may delete that group. If 
TVS fails to acknowledge this group after a 
predetermined timeframe, the GSE continues to resend 
this group until an acknowledgment is received. The 

45 TCR_DISTRIB process 566 reads groupings of records and 
distributes a record based on the toll-free number 
associated with that record in the following manner: 

First, as the reference database 551 contains 
information on which toll-free number belongs in which 

50 CDR database associated with the TVS server, records 
are grouped for each CDR database 561a, 561b, .., 561n, 
to which they belong. The reference database 551 
additionally flags which numbers are to have 
statistics collected for them. Thus, an additional 

55 group of records is created and may be routed to a DMQ 

Queue 553b which inputs these records into a 
statistics "stats" counter process 570 for statistics 
processing, as will be described in greater detail 
herein. When all the records in the group have been 

60 read, each group is written to it's DMQ queue 

554a, 554b, .., 554n associated with its destination 
database CDR Database 561a, 561b, . . , 561n . For 
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instance, via a TCR Poster process 555a, records 
destined for CDR database 561a are forwarded from the 
DMQ Queue 554a. Particularly, each CDR poster process 
555a, 555b,.., 555n reads data from it's corresponding 
5 DMQ Queue and formats & stores those records in their 

database . 

With further regard to the stats counter 57 0 
shown in Figure 21, TCRs are rolled up into statistics 
records. Specifically, the stats counter 570 keeps 

10 counts of the following: summary information about 

each toll free number for an hour; summary 
information about each toll free number and 
termination for an hour; and, summary information 
about each toll free number and origination NPA for an 

15 hour. These statistics are kept in memory for a pre- 
determined amount of time, e.g., one hour. As 
matching records come in, statistics are updated. At 
the end of the time period, these records are written 
to the statistics database 571, and particularly high 

20 speed electronic data drives. 

The statistics that are gathered for each 
subscriber's toll-free number in the TVS system of the 
invention include: total completions, total call 
duration, total attempts, total switch control call, 

25 total Network Control System (NCS) blocked, total NCS 

rejected, total network blocked (all routes busy) , 
total supp code blocked, and out -of -band blocked. 

Additionally, statistics gathered for NP table 
processign include: originating NPA, total attempts 

30 per NPA, total calls completed (tec) per NPA, total 
call not delivered (blocked) per NPA, total attempts 
for International Originations, tec for International 
Originations ("10"), total calls not delivered 
(blocked) for 10. 

35 Additionally, call statistics for terminations 

inlcude: termination type, termination address, total 
completions, total call duration, and call 
dispositions indicating the cause of an incomplete 
call including: total short calls, total didn't write, 

40 and total didn't answer. 

With more particularity regarding the 
statistics database design, and, in further view of 
Figure 21, the stats_counter 570 contains processes 
that read TCR' s from a DMQ queue, and create 
45 statistics records for input to "c_tables" in the 
statistics database 571. 

The algorithms implemented in TVS stats_counter 
process 570 for generating statistics data tables so 
that TCR records may be processed in batches include: 

50 a summary table process which process generates 

statistics for call summary data; a NPA table process; 
Country table process and Termination table process. 
The stats__counter 570 enables multiple processes to be 
run at the same time on the same machine. To allow an 

55 arbitrary number of Stats_Counter processes, the stats 

databases are organized as a series of configurable 
tables, e.g., "C_Tables" 572, which are temporary 
tables that the stats counters first insert records 
to. These tables are identical to normal statistics 

60 tables with the exception that they include a field 
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for the date in them. In accordance with the 
provision of C__tables, a pending__stats_list table and 
s tats„_table__usage_lis t table are used to keep track of 
what data is in the C_tables, and to drive the 
5 movement of data from the C_tables to a more permanent 
database tables 574. 

Particularly, when the stats_counter process 
570 starts, it performs a check of the set of 
"c__tables" by inserting its process name in the 

10 used by process field of the stats_table_usage_lis t 
table. If the s tats_counter process unexpectantly 
dies, it reclaims the tables previously used by 
searching the stats_table_usage_list for tables marked 
with it's process name. The s tats_counter process 

15 adds an entry into the pending_s tats__list every time 

it creates stats for a new day. The usage__flag is 
initially set to "1" in that table. At the top of the 
hour, for example, the stats__counter processes marks 
all of the usage_flag entries to "2" , and modifies the 

20 value of the used_by_process field in the 

s tats__table_usage__list to "MOVER" . The stats_counter 
process then searches the stats_table__usage_list for 
another set of tables to use for the next hours 
counting. If the s tats_counter process cannot find a 

25 set of tables, it aborts. To avoid this, there is 

extra sets of "c_tables" configured with entries in 
the stats_table__usage__list . 

An example pending__stats_list table comprises a 
directory of what the stats_counter is working on, or 

30 finished with. Each record represents a name of a 

c_table that contains statistics, and dates that are 
contained in this c_table. The report generator 
process, and on-line access use this table to 
determine if there is any data in the eatables that 

35 they may be interested in, and what the table name is. 
The Stats_counter processes insert records into this 
table, and data^mover processes 573, shown in Figure 
21, remove entrTes from this table. 

An example stats_table_usage_list table 

40 comprises a list of all the c_tables that are 

configured and used by the stats_counter processes and 
data_mover processes to allocate tables amongst 
themselves. The number of records in this table 
remains static. Stats_counter processes 570 update the 

45 "used by .process" field with their process name when 

they are m control of that table. At the top of the 
hour, they may change the used_by_process to "MOVER", 
and attempt to find another table that is unallocated. 
The movers change the used. by process name to "NONE" 

50 when they have completed moving data from that 

c_table. In the preferred embodiment, there are 

four types of movers are currently configured to run: 
NPA, summary, country, and termination. Each type of 
mover looks in the pending_stats_lis t for the name of 

55 the "citable" of the same type with a usage_flag of 

"2", for instance, and the earliest date. The mover 
then transfers the data for this date from the 
"citable" to appropriate the permanent table. When 
the data transfer is finished, the matching record in 

60 pending_stats__list is deleted. If there are no more 
entries for this "citable" in pending__stats_list , the 
mover process takes the precautionary step of 
searching the "c_table" for additional data that was 
not noted in pending__stats„list . Entries are then 
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added to pending_stats_lis t for any data found in the 
"c_table" . If no additional data is found, 
used_by__process in stats_table_usage__list is changed 
from "MOVER" to "NONE " for this n c__table" . 
5 The interaction between StarWRS web -based 

reporting system and TVS system 550 will now be 
explained in greater detail with respect to Figure 22. 
In the preferred embodiment, reports may be triggered 
by two possible sources: Scheduled report setup by a 

10 CORE order; and, real time report requests as 

forwarded from the report request/Report Manager 
Server 250. The report generation process is 
hereinafter described with respect to real-time 
reports from the StarWRS system. 

15 As mentioned, requests are received in real- 

time from the Report Manager Server 250 which either 
passes on-demand reports from an end-user, or reports 
that it has internally scheduled via Report scheduler 
server 260. In the TVS server 550, a report manager 

20 proxy process 250'' gathers information about the 

reports to be generated from the reference database 
551 by determining whether the report request may be 
fulfilled by statistics processing, or the CDR's. If 
CDR' s are needed, a determination is then made as to 

25 which database contains the necessary data. 

Additionally determined is whether the needed CDR data 
to fulfill the request spans a long period of time, 
e.g., several days. Once these determinations are 
made, the request is sent to the appropriate DMQ queue 

30 554a, 554b, .. , 554n, or 553b via the report manager 

proxy process 2 5 0' ' . 

For the scenario requiring generation of call 
detail data ( "CDT" ) reports, i.e., those requiring 
Call detail records, the destination of the report, 

35 e.g., StarWRS Inbox server 270, fax, U.S. mail, etc., 
is determined from the reference database 551. Then, 
the requested data is gathered based on the metadata 
request, analyzed, and formatted by various 
corresponding report generation "CDT" processes 

40 indicated in Figure 11 as CDT process 559a,.., 559n. 
Although not shown in Figure 22, it should be 
understood that reference data that originates from 
CADB and COMS may be necessary to complete these 
reports. Furthermore, although not shown, the TVS 

45 server is provided with an additional set of gueues 

and CDT processes for each of the CDR processing to 
allow longer reports to not interfere with shorter 
reports. If the requested report is destined for MCI 
Mail delivery (Fax, Mail, US Mail): then the data is 

50 formatted with headers, page breaks, line numbers into 
a report that is saved to a file. The report is then 
sent to an Internet Gateway 279, e.g., the MCI Mail 
Internet Gateway via SMTP for delivery by MCI Mail. 
Once the file is successfully sent it is deleted, thus 

55 allowing for report generation to continue when the 
MCI Mail Internet Gateway is not available. 

If the report is destined for the StarWRS Inbox 
server 270, the data is formatted in a comma separated 
value (CSV) format and sent to the Inbox via FTP. The 

60 Inbox is notified via TCP/IP that the report is 
complete by the inbox send process and that the 
appropriate metadata is available for report 
presentation via the report viewer. 
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An identical process is implemented for those 
customer report requests for aggregate data, i.e., 
statistics. However, the data that is gathered and 
analyzed is retrieved from a report generation process 
5 581 which retrieves the requested report data from the 
statistics database 571. 

As described herein, when the user requests 
call detail for a particular period of time, this 
request is translated by the StarWRS component into a 
10 metadata file which is sent to TVS in the manner 
described herein. Users schedule reports for 
execution using the Report Scheduler in StarWRS. When 
the user has completed report selection, modifications 
and scheduling, the StarWRS Report Scheduler component 
15 260 creates a metadata message comprising this 

information which file is passed to TVS in real time. 
The TVS then uses this file to formulate a query and 
runs the report for the scheduled time period. 

After TVS runs the report, TVS sends the report 
20 to the Inbox server component 27 0 of StarWRS 
immediately after they are completed. 



RTM 

As further shown in Figure 18, the nMCT 

25 Interact's web-based front-end and middle-tier TVS 
system infrastructure 500 implements processes 
enabling customers to monitor in real time, their 
network traffic call detail statistics, in real time, 
via TCP/IP connections 293 and 294. As shown, 

30 customer requests are entered by the customer 100 via 

an RTM graphic user interface and preferably 
communicated over secure TCP/IP socket connections for 
input over the firewall 25 to at least one secure 
server, e.g., a DMZ RTM Web Server 52 (Figure 2) that 

35 provides for authentication, validation, and session 
management in the manner as described herein. 

Particularly, the user first establishes 
communication with the RTM Web server 52 (Figure 2) , 
Dispatcher and StarOE systems to enable logon, 

40 authentication and verification of Real Time traffic 
Monitor entitlements, as described above with respect 
to Figures 4-6. If the customer subscribes to Real 
Time Monitor, a Traffic Monitor icon 85 (Figure 5(a)) 
is automatically enabled when the home page appears. 

45 The process flow 700 for implementing real time 

monitoring of a customer's network traffic is shown in 
Figures 23 (a) -23 (b) . Preferably, as shown in Figure 
23 (a) , in response to selecting the RTM function, at 
step 721, a hot link connection to the TVS CGI/HTML 

50 implementation of RTM is in order to initiate a second 
security/authentication process and verify the 
Unpriced data RTM products for which the customer is 
provisioned. With more particularity, the user * 
connects to the RTM URL. and checks the RTM Web Server 

55 implementing an HTTP Post method. In response, the 

RTM Web Server generates a cookie and implements the 
RTM Web Server common gateway interface protocol 
("CGI") to send a validation request to TVS via TCP/IP 
with the cookie. TVS server 550 validates the logon 



WO 99/15979 



PCT/US98/20170 



-62- 11052. KLK 

f : \wor k:\1171\11052\SPEC\11052 . FOR 



request by referencing Level of Service tables (not 
shown) provided in the Traffic View server that 
confirm the customer is enabled for RTM, as indicated 
at step 729 . The TVS server stores user information 
5 with the cookie, and returns the validation 

information to the Web Server. Next, via CGI, an HTML 
page is sent to the user as indicated at step 731 
presenting the user with an RTM screen and menu 
options, as indicated at step 735, thus allowing 
10 customer access to all RTM functionality which that 
user is entitled. As will be explained, this 
functionality includes interaction with the RTM 
application to formulate and transmit requests and 
receive the results. For example, the user may select 
15 the tollfree numbers to be tracked, enter a polling 

period, and define the call detail statistics desired. 
From an RTM window provided on a web -screen 
age, the customer is enabled to select or modify 
is/her predefined RTM use profile, as indicated at 
20 step 740, Figure 23(a). Specifically, the customer 

may create or edit their user profile, for example , by 
entering selection criteria such as: 800/8xx or Vnet 
number to report, a polling interval, and time zone. 
The user may also delete a user profile. The entered 
25 selection criteria may be saved by the subscriber as a 

new user profile for storage in the TVS server 
Level__pf_use tables, as indicated at steps 744 and 
745, or submitted directly to the TVS server, as 
indicated at steps 749 and 750. It should be 
30 understood that all TVS RTM functionality may be 

available to the customer. If, at step 740, the 

subscriber has selected a previously defined use 
profile, as indicated at step 747, the subscriber may 
modify the profile, i.e., 80 0/8xx or VNET number to 
35 report, polling interval, and define statistics , as 
indicated at step 748, and submit it directly to the 
TVS server, as indicated at steps 749 and 750 (Figure 
23 (b) ) . 

At this point, the user can interact with the 

40 RTM application to formulate a request, transmit it 

and receive the results according to the user- selected 
tollfree number (s) to be tracked, polling period and 
defined statistics desired. 

Briefly, after receiving the request, at step 

45 752, Figure 23(b), the TVS formulates a query and 

submits the query to the call detail database which is 
the repository of all call detail records for the 
particular number selected. The TVS server selects 
the call detail data in accordance with the user 

50 profile or selection at step 754, and passes the data 
to the RTM Web Server which formats the data into an 
HTML table, as indicated at step 756. This HTML table 
is sent to the user's browser at step 758 and the 
process continues at step 759 for each successive 

55 polling interval until the user terminates the 
request . 

Figure 24 is an illustration depicting the nMCI 
Interact RTM polling process. As shown in Figure 24, 
the RTM system supports an HTML form "Post" or 
60 automatic refresh, to an active server page script. 
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Thus, a Web page providing real-time unpriced call 
detail data has a timeout interval, e.g., one minute 
or greater, at which point the Web browser 20 will re- 
post a request for data (HTTP Post) . The Post request 
5 is received by an Internet Information (web) Server 

("IIS") process 59 0 in the RTM server 52 that executes 
an active server page (".asp 7 ') script. This .asp 
script calls a DLL polling routine 593 via a 
communications (COM) interface. This polling DLL is a 

10 Visual C++ application running in the RTM Web server 
52. Upon receipt of the timeout request, the DLL 
calls the TVS server 550 for real -time call detail 
data retrieval via TCP/IP messaging. Particularly, 
the call detail request is received by a RTM data 

15 retrieval process 595 executing in the TVS server 550. 
Then, the real time data for each phone number (e.g., 
800/8xx or VNET) is retrieved from the call detail 
database 59 8, which is the repository of real-time 
call detail data. The retrieved real time data is 

20 returned to the polling DLL process 593 and the 

current RTM output is formatted by the polling DLL and 
printed to the HTML page. The HTML page with the 
script - embedded HTML is then communicated back to the 
Web Browser 20 via the IIS process 590. 

25 In view of the foregoing, a subscriber via a 

client workstation running a Web browser can monitor 
in real time, or, in addition, using the RTM system, 
has the ability to monitor in substantially real time, 
the operation of the network as it relates to the 

30 calls directed to that subscriber's special service 
call number (s) . For example, the subscriber may see 
in real time how many calls are being attempted minute 
by minute, how many calls are being allowed through 
the network, how many calls are incompletes, how many 

35 calls are blocked, etc. This ability to monitor the 

operation of the network gives the subscriber the 
ability to decide in real time the specific actions 
that need to be taken. For instance, if there is an 
abnormal number of incompletes for a given period, the 

40 subscriber can look at the specific call records that 
made up those incomplete calls. The subscriber may 
then request the management of the network to 
restructure the network so as to reroute the incoming 
calls of the subscriber to different locations where 

45 they may better be handled. 



Service Inquiry 

Another application of the suite of 
telecommunications network applications is the 

50 networkMCI Interact Service Inquiry ("SI") application 
which is a web -based network management product that 
enables customers to manage, i.e., create, status, and 
display service requests (''trouble tickets' 7 ), to -the 
enterprise service provider (MCI) . Particularly, 

55 through a client application GUI, customers have the 
ability to create and query trouble tickets 
( "tickets" ) . 

Figure 2 illustrates the service inquiry "SI" 
application server 36 interfacing with a backend 
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Customer Service Management" ("CSM") legacy host 
system 40(a). The SI application server component 36 
includes processes for handling all requests made of 
Service Inquiry by the customer (as relayed via the 
5 Dispatcher 26). Specifically, requests are handed off 
to Service Inquiry back-end processes and responses 
are received from the Service Inquiry back-end 
processes to be routed back through the Dispatcher to 
the client workstation web browser 20. 

10 As in any of the above - described suite of 

telecommunications network applications, the Service 
Inquiry application utilizes the Common Objects 
application framework (COF) to inter -operate with the 
networkMCI Interact back plane and integrate with the 

15 other elements of the networkMCI Interact 

architecture. The Common Objects framework is 
utilized to leverage existing infrastructure services 
such as logon and authentication, transaction 
management, and security. Particularly, the Service 

20 Inquiry application extends the COAppImpl class in 
order to inter - operate with the Interact back plane 
and other networkMCI Interact applications (as 
required) , and, includes one or more screens derived 
from the COAppFrame class. Most of the high level 

25 classes dealing with the initiation of transactions 

are utilized by Service Inquiry. The COClientSession 
class is available to the Service Inquiry application 
upon successful login to the networkMCI Interact 
system and is utilized for session management (e.g., 

30 connect, disconnect, and logoff) . The family of 
COTransaction classes is used to send and receive 
messages to the backend Service Inquiry service. 
These classes include CONonblockTransaction, 
COSynchTransaction, and COAsynchTransaction and, a 

35 COBulkTransaction may also be used if necessary. 
Additionally, the SI utilizes all of the 
COCommuni cat ions classes with the exception of the 
COBulkTransaction. However, as development and 
testing continues, the COBulkTransactions class may be 

40 utilized. 

Figure 25(a) illustrates the high-level design 
of the Service Inquiry application 2200 including the 
client application 2250 and server 2300 components. 
As shown, Service Inquiry requires integration with a 

45 number of external systems and utilizes the Common 
Objects Framework for inter - application 

communications. Interfacing with the Service Inquiry 
application server 3 6 via the common objects framework 
are the StarOE server, e.g., for user profile 

50 information, as well as other Service Inquiry specific 

data ( and, the CSM legacy host that provides the 
ability to query, status, and take action on service 
inquiries. Communication between the SI application 
server 36 and CSM 40 (a) is via Registry middleware, 

55 such as described in commonly owned, co- pending U.S. 
Patent Application No. 08/560,550 incorporated by 
reference herein. Figure 3 shows COF -based inter - 
application communication between Service Inquiry and 
StarOE. It should be understood that if an external 

60 system does not use the COF, Service Inquiry may 
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utilize that system's API set and communication 
mechanism for inter - application communication. The 
above- referenced Registry system has a number of 
options for inter - application communication, including 
5 both Java and CORBA interfaces. 

The Service Inquiry communications and 
application server packages provide the framework for 
transporting client messages to the mid- tier 
application server for invocation of domain objects. 

10 The domain objects encapsulate the logic to translate 
the actual client messages and deliver the request to 
the backend services. The response from the backend 
service is then received by the application server and 
returned to the originating client. The framework 

15 enables customers to develop the business logic 

independent of the underlying transport layer and 
negate the need to modify the transport layer whenever 
a new domain model is introduced into the framework. 
The separation of the framework from the domain is 

20 accomplished through the use of reflection by 

dynamically loading and executing the business logic 
at the application server once the client request 
specification is received. 

As described herein, the SI application server 

25 2300 interfaces with the Legacy Backend 40(a), CSM/SI 
through a Requester object 2310 and Receiver object 
2350 as shown in Figure 25(b). Particularly, the 
SvcInqCSMRequester object 2310 is the class that 
represents the requester which takes the request data 

30 that comes from the Front - End/Client application 
through the Transaction Manager 2320, builds the 
CSM/SI request transactions by interacting with the 
Translator classes 2380 and snips off the requests to 
CSM. The request data that comes from the Front 

35 End/Client is an array of strings that are required 

from the customer for the request to be made. Minimal 
information is passed from the client to reduce the 
communication overhead from the client to the SI 
application server. All other information is packaged 

40 in the Requester. Particularly, the Requester object 
2310 uses the SvcInqRegis tryHeader and SvcInqSIHeader 
classes in the Translator 2380 to build the "Registry 
Header" and "SI Header" strings that are required for 
the CSM/SI request transactions. It also talks to the 

45 SvcInqActivity or the SvcInqRemarks classes to build 
the data portion of the CSM/SI requests. Once the 
CSM/SI Transaction String is formatted the actual 
request to CSM is made. Sending the transaction to 
CSM's Standard Interface (SI) via Registry classes 

50 does this. 

The receiver object is an instance of the 
SIRegis tryHandler class whose responsibility is to 
obtain the responses from CSM, parse the response, 
strip off the headers and build objects from the - 

55 response data, by interacting with the Translator 

classes 2380. Particularly, it uses the SvcInqRemark , 
the SvcIngActivi ty , the SvcInqTroubleTicket or the 
SvcInqRegistryEntry class in the Translator to build 
the remark, activity, detail or list of Ticket object 

60 from the response string that is received from CSM. 
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The built object is then s ent back to the Transaction 
Manager 23 80 who passes it back to the Front - 
End/Client . 

Figure 7 (a) illustrates a diagram depicting the 
5 execution of a transaction by the SI application 

server 3 6 with each bubble representing" a separate 
thread. The following itemized scenario describes the 
sequence of events in detail with each number in the 
scenario associated with the numbers in Figure 7(a). 

10 First, at step 501, the SI Application Server 

instantiates and starts the Transaction Manager 260 in 
a separate thread. The SI Appplication Server then 
instantiates and starts the Transaction Server 250 in 
a separate thread at step 502. The SI Application 

15 Server 36 instantiates and starts the Registry Server 
in a separate thread at step 503. 

In operation, the Transaction Server receives a 
client transaction request, as shown at step 504. The 
connection is accepted and Transaction Handler thread 

20 is removed from the thread pool for execution, as 

indicated at 505. The Transaction Handler unpackages 
the transaction request at step 506 and puts the 
request message into the Transaction Manager's 
RequestQ. The Transaction Manager 2 60 removes the 

25 request message from its RequestQ at step 507 and 

spawns a Transaction Executer thread to execute the 
transaction. Then, at step 508, the Transaction 
Executer translates the message and executes the 
transaction by loading the domain class and invoking 

30 the specified method which send the request to the 
backend services. 

As indicated at step 509, the backend service 
responds by sending the result of the transaction to 
the Registry Server which accepts the connection. At 

35 step 510, a Registry Handler is removed from the 

thread pool for execution for performing translation 
of the received message and placing the result into 
the Transaction Manager's ResponseQ, as indicated at 
step 511. The Transaction Handler retrieves the 

40 transaction result from the ResponseQ at step 512 and 
the transaction response is delivered to the client at 
step 513. 

The mainframe legacy backend 40(a) "Registry" is 
the cross -platform communication mechanism that is 

45 used by Service Inquiry to send messages to and 
receive messages from the CSM host. It shields 
applications from network protocols. CSM is provided 
with a mainframe database (not shown) that provides a 
set of Transactions to request CSM information through 

50 its Standard Interface (SI) which uses Registry as the 
messaging system. The Service Inquiry Application 
Server 23 0 0 is configured to communicate 
asynchronously with CSM using Registry's RQS as the 
Inter- Process Communication (IPC) mechanism. Since 

55 CSM supports only one-way messaging, the communication 
between Service Inquiry and CSM/ SI is asynchronous. 
When CSM 40 (a) receives a request from the Requester, 
it does not send any acknowledgment back to the 
requester. The requester only receives a confirmation 

60 from Registry that the request was successfully sent. 
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When CSM finishes processing the request, it sends the 
response to the Receiver. 

Registry configuration consists of configuring 
the Registry client which sends request messages to 
5 CSM from the Service Inquiry Requester and Registry 

server that receives responses from CSM and passes it 
to the Service Inquiry Receiver. As shown in Figure 
25 (b) the Registry Queuing system, RQS is an 
asynchronous mode of inter process communication where 

10 there is one queue on the client and one on the server 
and there is only one TCP/IP connection always open 
between the client and the server. The client puts 
its requests on its own local queue 2322 and it is 
then forwarded to the queue on the server. The server 

15 takes the request off the queue, processes the request 
and the response messages are put in the client's 
queue 2325. Since there is only one TCP/IP connection 
at any given time between the client and the server 
this mode is very efficient in terms of both network 

20 and system resources. 

As in the other application of the nMCI Interact 
suite, the Service Inquiry client application is 
written as a Java application to be executed at the 
client web browser running, for example, Microsoft 

25 Internet Explorer 4.0. The Service Inquiry client 

will be started from the networkMCI Interact homepage 
upon selection of the service inquiry icon 91 shown in 
the home page 70(a) of Figure 5(a). 

Figure 25 (c) illustrates an example service 

30 inquiry main screen 2400 presented upon entry into the 

SI system selection. As shown in Figure 25(c), the 
Service Inquiry display 2400 presents a title bar, 
menu bar, tool bar, work area, and message window to 
provide the user alternative ways to manage different 

35 components of Service Inquiry product. It should be 

understood that any action available from the tool bar 
will also be available within the menu bar. 
Preferably, there are two permission levels that a 
user can have: 1) a View permission allowing a user to 

40 view the Service Inquiry application desktop (Default 
Query) , define Service Inquiry queries, view the 
details, remarks and activities, print, and report; 
and, 2) an edit permission allowing a user to create 
trouble tickets, refer out trouble tickets, close 

45 trouble tickets, add remarks to trouble tickets, and, 

update trouble tickets. 

With more particularity, the menu bar 2410 
consists of the following items that correspond to the 
associated functionality: a File option 2410a 

50 including selections for creating a new ticket or new 
query, opening an existing query, saving a query being 
edited; printing and exiting the SI service; an Edit 
option 2410b including selections for querying on a 
specific ticket number, closing a currently selected 

55 ticket, or referring back to a currently selected 

ticket; a View option 2410c including selections for 
showing details of a currently selected ticket, and 
refreshing current query results; a Tools option 2410d 
including selections for sorting tickets in the active 

60 window; and, a Help option. The tool bar 2450 
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provides a Create button 2451 for creating a new 
ticket, a Query button 2452 for generating a new 
query, and, a find button 2453 enabling queries on a 
specific ticket number. 
5 The Query component of the Service Inquiry 

application enables Service Inquiry users to query 
trouble ticket information within the system, i.e., 
the listing or viewing of tickets based on, e.g., 
different selection criteria. This component also 

10 allows provides users with the ability to add remarks 
to tickets. A Default Query functionality is provided 
that allows users to keep a dedicated query available 
at all times. This query enables users to monitor the 
subset of tickets that are of most interest to them. 

15 A refresh mechanism is additionally provided so that 

the user may keep up with as current a status of these 
tickets as needed. The Default Query may be executed 
and displayed immediately on startup of the Service 
Inquiry application and is available throughout the 

20 Service Inquiry session. Preferably, the Service 

Inquiry application includes a set of predefined 
queries, one of which is preset as the Default Query 
and which may be redefined at any time. The user can 
only set their Default Query from a saved query. 

25 To create a new query, e.g., upon selection of 

the "Query" button 2452 from the tool bar 2450, a 
"Criteria" window is displayed such as the example 
window display 2460 shown in Figure 25(d) which 
enables the customer to select from among the 

30 following criteria to be used in the query: priority, 
status, identifier, open date, and ticket number. As 
criteria are selected from the "CRITERIA" tab 2462, 
new tabs (not shown) appear that are associated with 
the selected criteria. It is from these tabs that the 

35 actual parameters are specified for which the query is 

executed against. As the query is built, the 
parameters that are selected will populate themselves 
m the table 2464 to the right of the tabbed panel. 
At any point in this selection process, the user may 

40 perform the following: move back and forth to any 
criteria tab by selecting the "Back" and "Next" 
buttons 2461a, 2461b respectively, or selecting the 
desired tab directly; add or remove criteria tabs by 
selecting or deselecting the associated checkbox from 

45 the "CRITERIA" tab 2462; execute the query by 

selecting the "Execute" button 2461c; save the query 
by selecting the "Save As" button 2461d; remove 
highlighted parameters in the table by selecting the 
"Remove" button 246 le; or, remove all parameters in 

50 the table by selecting the "Remove All" button 2461f . 

As an example, a "List Tickets by Status Request" 
transaction will provide all the tickets for a given 
organization (ORG) code with the requested status and 
created after a specified date. The ORG code to-be 

55 passed in this transaction is one of the selection 

criteria representing the originating organization or 
the organization where the ticket was created. The 
customer may choose from a list of ORGs that the 
customer has authority over and a primary ORG is 

60 obtained from every customer and is stored locally in 
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the user profile. The resulting information from all 
of the tickets will be cached for future processing. 
Generally, only one type of status may be specified in 
a single request: Open, Closed, Referred or Cancelled 
5 status. If a customer has authority over more than 

one organization that customer is able to view tickets 
for any organization he/she has authority over. If a 
customer has access to a primary organization, then 
he/she has implied access to all the subordinate 

10 organizations meaning that the request will apply to 
the subordinate organizations as well. Furthermore, 
this transaction may only display some of the 
details/fields of the tickets which means that the 
data cached from this reguest may only be used to 

15 process the Queries on tickets. It cannot be used to 
view all the details of the tickets for which further 
CSM/SI transactions will have to be made as will be 
herein described. 

Once the query is specified and executed, the 

20 "Query Results" window such as provided in the example 

window 2470 of Figure 25(e) is displayed to present 
the results of the query in a table 2472. Preferably, 
these results may be sorted by column by either 
clicking on the column in the table to sort by or by 

25 selecting "Tools/Sort" from the menu bar 2410. 

Selecting "Tools/Sort" from the menu bar will initiate 
display of a "Sort" window such as the example display 
2475 shown in Figure 25(f) which is capable of a three 
level sort by column in the table. The table columns 

30 can also be reordered by dragging and dropping them to 
their desired locations. Details of a particular 
ticket may also be viewed. 

The ability to save and retrieve queries allows a 
user to persist queries not only for the current 

35 session but for future sessions as well . This gives 

the user the ability to define a query once, then save 
it such that there will be no need to define it again, 
i.e., all the user needs do is retrieve and execute 
it. To save a query, the user must first create the 

40 query and then select the "Save As" button which 

enables display of the "Save As" window such as the 
example window 2480 shown in Figure 25(g). This 
window enables a user to select from the list of 
existing saved queries or type a new name in entry 

45 field 2481. If an existing saved guery is selected 

its query will be copied over and its name will refer 
to this new guery. A checkbox 24 82 is available to 
designate this new query as the Default Query. To 
retrieve a saved query, e.g., upon selection of the 

50 "File/Open/Query" from the menu bar 2410, an "Open 

Query" window such as the example window 24 85 shown in 
Figure 25(h) is displayed which provides a list of all 
saved queries. Once the desired query is selected the 
user may perform the following: execute the guery, 

55 i.e., run the query and display the results m the 

"Query Results" window or the "Default Query" window 
if the user selects it as their default query; or, 
edit the query by bringing up the "Criteria" window 
2460 (Figure 25(d)) with the appropriate parameters 

60 already m the table. 
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The customer may then view the results of a 
query, i.e., the details, remarks or activities of a 
Ticket chosen from a list of Tickets. To view the 
details of a ticket, the user may either select it 
5 from the query results and select "View/Details' 7 from 

the menu bar or double click the ticket in the query 
results. Particularly, a "Display Ticket Request 
Transaction" (CSM/SI transaction) may be used to 
obtain the details, activities and remarks of a 

10 ticket. This transaction allows several display 

requests to be made, e.g., by setting corresponding 
flags to 'Y'. Whenever the customer wishes to view 
details, remarks or activities of a particular ticket, 
this request will be made with all the three flags set 

15 and the ticket number stuck into the SI header which 

will generate three or more responses. The "Display 
Detail Response Transaction" is a response that 
returns all the data elements corresponding to a given 
ticket in a "Details" window such as the example 

20 window 2490 shown in the Figure 25 (i). This window 
249 0 provides information about the selected ticket 
including: ticket number, ticket priority, ticket 
status, ticket identifier, ticket product, ticket 
service, date occurred, trouble description, and 

25 organization (ORG) . It should be understood that the 

number of data elements will be different for 
different types of tickets. 

Alternately, to find a ticket, e.g., upon 
selection of the ''Find" button 2453 from the tool bar 

30 2450, the CSM/SI Transaction, "Display Ticket Request 
Transaction" is invoked, where the ticket number is 
passed on the request for handling as described above. 
It should be understood that, in the preferred 
embodiment, a "Change Ticket Request Transaction" may 

35 be implemented allowing the customer to change some of 
the fields of a ticket that is already created. This 
restriction is enforced by the GUI as this CSM/SI 
transaction does not impose any such conditions on the 
field being modified. 

40 Remarks are comments added to a ticket for 

historical purposes and can aid in the resolution of 
the problem. A customer must be viewing the 
particular ticket's details that contain the remarks 
desired. The "Display Remarks Response Transaction" 

45 is a response that shows all the comments added on the 
ticket either by the customer or by the enterprise 
(MCI) . The CSM legacy system supports "public" and 
"private" remark types. Thus, from the "Details" 
window 2490 shown m Figure 25 (i) , the user may click 

50 on the "Remarks" button 2491 which will bring up the 

"Remarks" window such as the example window 249 5 shown 
in Figure 25 (j). From the remarks window, the remarks 
for that ticket are displayed. It should be 
understood that remarks may be added to a ticket for 

55 historical purposes, e.g., to aid in the resolution of 
the problem. From the "Remarks" window the customer 
may click on the "Add Remarks" button 249 6 which 
enables display of the "Add Remarks" window (not 
shown) which allows the customer to add remarks to 
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that Ticket. Thus, by implementing an "Add Remarks 
Request Transaction," the customer may add remarks on 
a ticket that is in an open status at any time. This 
may be used as a final step, just after creating a 
5 ticket, for example, to enable the customer to 

describe the trouble in his/her own words or add any 
comments. This transaction returns a success or 
failure response. 

Activities are events that occur to a ticket 

10 throughout its lifecycle. These events include 

changing status, changing priority, and reassignment 
of the person working the ticket. The customer must be 
viewing the particular ticket's details that contain 
the activities desired. The "Display Activity 

15 Response Transaction" is a response that provides all 
the activities, i.e., actions that have been taken on 
the ticket. Specifically, from the "Details" window 
2490 (Figure 25 (i)), the customer may click on the 
"Activities" button 2492 which will bring up the 

20 "Activities" window 249 8 such as shown in the example 
screen display of Figure 25 (k) . From the activities 
window, the activities for that ticket are displayed. 
. This is a useful transaction in checking the status 
of a ticket and, it aids in tracking a ticket as it 

25 shows which organization the ticket is currently in. 

The create component of Service Inquiry 
application provides Service Inquiry customers with 
the ability to create a ticket within the system. The 
first step in the creation of a trouble ticket is to 

30 identify the Event - Type/Call -Type of the problem which 
is basically the way CSM handles different problem 
types and is required for most CSM/SI transactions. 
To do that the client front end asks the customer the 
problem/identifier type and then narrow down the 

35 problem by having the customer choose from a list of 
Product types, Service types and Trouble Descriptions 
as described herein with respect to Figure 25 (1) . 
Based on these choices the system maps it to the 
correct Event -Type/Call -Type which mapping is done 

40 using database tables stored locally on the client. 

Once the Event - Type/Call -Type is determined, the data 
fields that correspond to that Event - Type/Call -Type is 
obtained from the database tables. The information 
required for all these fields is then gathered from 

45 the customer by presenting appropriate questions. 

Once all the required information is available, the 
system performs an "Open Ticket Request Transaction" 
and passes all of the data fields. The CSM legacy 
system then attempts to open a Trouble Ticket based on 

50 the data passed, and performs an "Open Ticket Response 

Transaction" to indicate if the ticket was created 
successfully along with the ticket number. Based on 
this response a confirmation message along with the 
ticket number is displayed to the customer. 

55 As an example, to create a service request from 

scratch, the customer may select, for example, the 
"Create" button 2451 from the tool bar 2450 of Figure 
25 (c) . This will initiate display of a "Create" 
window such as the example window 2 50 0 shown in Figure 

60 25(1). From this window, the customer provides 
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answers to the questions for each tab 2 510 shown as 
questions 2512, and clicks the "Next" button 2514 when 
ready to go to the next set of questions. As the next 
tab appears, the answers from the previous tab 
5 populate the table 2515. The user may navigate via 
the "Back" and "Next" buttons or by using the tabs. 
In the preferred embodiment, the questions are dynamic 
depending on previous answers. Thus, if the user goes 
back and changes the answer to a question that later 

10 questions depend on, then those questions will be 

overwritten by the new set of questions. The user 
will be warned if this is the case. 

Once the ticket is opened, it has to be referred 
out to a "Customer Facing Organization" to initiate 

15 the problem resolution process. To do this, the CSM 
system refers the ticket out to an organization 
obtained from the user up front and stored in the User 
Profile. This is done using an "Enter Activity 
Request Transaction" which allows the customer to 

20 enter different activities like 'Refer Out', 'Close', 
'Refer Back' and 'Open' on a ticket by passing the 
appropriate activity code. 

Finally, the SI application allows the customer 
to close the ticket by using an "Enter Activity 

25 Request Transaction" described with respect to ticket 
creation. When a customer wishes to close a ticket, 
the system will make this transaction on behalf of the 
customer by passing the activity code for 'Close'. A 
customer is allowed to close a ticket only if it were 

30 created by that organization and if the ticket is 
currently in that organization, i.e., it has been 
referred out to that organization. Since only the 
organization that opened the ticket has authority to 
close it, once a ticket has been resolved the ticket 

35 is referred out to the customer's organization. If 

the customer is not satisfied with the problem 
resolution, that customer may refer the ticket back to 
the enterprise (MCI) . This is also accomplished using 
the Enter Activity Request Transaction. Again, the 

40 system will make this transaction and pass the 
activity code for 'Refer Back'. 

The creation of trouble tickets through Service 
Inquiry will now be described in greater detail in 
view of Figure 25 (m) . In the preferred embodiment, 

45 the Service Inquiry application implements a domain 

object model (DOM) 2600 that allows the collection of 
information regarding a problem with a product offered 
by MCI. The questions that need to be asked to open a 
ticket vary by product and problem type. In addition 

50 to specifying- a problem with a particular product, 

Service Inquiry provides the user with the 
functionality to perform queries for Trouble Tickets 
and to view the details of Trouble Tickets. The DOM's 
responsibility is the creation and query of Trouble 

55 tickets and it accomplishes its tasks via interaction 
with the client presentation layer and interaction 
with the back-end systems. Information that is 
gathered via the presentation layer is used to 
construct backend transactions. The information 

60 returned from these backend transactions is formatted 
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to DOM classes, which are forwarded to the 
presentation layer . 

As shown in Figure 25 (m), the TroubleTicket 2610 
is the root of the Service Inquiry DOM. TroubleTicket 
5 instances contain identifying information that is used 
by the presentation layer to sort and filter a 
collection of TroubleTickets . The TroubleTicket class 
is responsible for accepting requests from the 

Eresentation layer, forwarding the requests to the 
ackend and returning results to the presentation 
layer. In addition to maintaining identifying 
information, a Trouble Ticket also contains references 
to a QuestionTree 2620 and a Registry 2650. 

Specifically, a Question Tree 2600 is comprised 
15 of three Domain Classes: QuestionTree 2620, Question 
2630 and RegistryEntry 2640. Ques tionTrees 2620 are 
essentially a set of questions for a particular 
product and problem type. The QuestionTree is 
responsible for the grouping of questions and the 
20 navigation between the groups. In addition, a 
QuestionTree knows if it has been completely 
specified, i.e.,. all of its required Questions have 
been answered. Within a QuestionTree, the group or 
category is designated by a unique name String) . 
25 Preferably, questions are stored in a hashtable (not 

shown) . A group name is the key and a vector of 

Questions is the value for each entry in the 
ashtable. The order of the groups is significant and 
since hashtables do not maintain order, a vector of 
30 Group names is required. This Vector of names is used 
for some of the navigational behaviors of a 
QuestionTree . 

The Registry 2650 is responsible for maintaining 
collections of objects that represent information 
35 retrieved from CSM via the client interface. The 

collections of objects represent Remarks, Details and 
Activities in CSM. Remarks and Details are also 
represented by vectors of instances of a 
"RegistryEntry" class. Activities are represented by 
40 a vector of instances of the Activity class 2660 which 
is an information holder having instance variables 
containing information that corresponds to fields in 
the CSM/SI Activity Record. 

The RegistryEntry class is a class in the 
45 Servicelnquiry DOM comprising instances 2640a that are 

used by Question instances 2630 and instances 2640b, c 
used by Registry instances 2650. When used by a 
Question, RegistryEntry instances 2640 represent the 
possible choices for answers to the Question. Once 
50 the user selects a RegistryEntry "choice" , this 

RegistryEntry instance becomes the answer to the 
question. When used by a Registry, the RegistryEntry 
instances 2640b, c represent remark or detail 
information respectively, that is retrieved from - 
55 CSM/SI. Specifically, RegistryEntry 2640a, b,c 

comprise the following instance variables: 1) a Text 
instance variable which is an optional variable used 
to specify text that will be presented to the user as 
a choice for an answer to a Question if the value is 
60 different than that specified by the regis tryValue ; 2) 
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registryKey instance variable which maps to a key in 
CSM/SI; 3) a regis tryValue instance variable which 
maps to the value in CSM/SI specified by the key in 
registryKey; .4) a nextGroupID instance variable which 
5 is an optional field used by the Question to assist 

the QuestionTree in some navigational tasks; and 5) a 
question instance variable which is a reference to the 
Question instance to which this RegistryEntry belongs. 
A RegistryEntry is contained by its Question; this 

10 instance variable is a back-pointer. 

The Registry Classes, i.e., classes that 
represent CSM/SI Registry records, have two additional 
responsibilities that are variations of a single 
behavior. The Registry Classes (RegistryEntry and 

15 Activity) are used for communication between Service 
Inquiry and CSM/SI. CSM/SI requires Remark, Detail 
and Activity information in fixed- length field record 
format; Service Inquiry requires Remark, Detail and 
Activity information in Java object format (instances 

20 of RegistryEntry or Activity) . To provide these two 
formats, the Registry Classes contain behavior to 
convert instances to fixed- length field record format 
and to instantiate themselves from fixed- length field 
record format. 

25 Questions are the main component in a 

QuestionTree. A Question has a vector of group 
identifiers that indicate the groups to which it 
belongs. A Question has a vector of RegistryEntry 
instances 2640a called choices. When the user 

30 "answers" the Question, the answer is set to the 

selected choice; i.e., the selected RegistryEntry. 
Short answer or text answer questions are a 
specialization of this behavior. Within each group of 
Questions, there is one question that is designated as 

35 the decision point which is used to determine the next 

group of Questions that need to be presented to the 
user. As a Registry Entry may contain a nextGroupID, 
the nextGroupID of the RegistryEntry instance selected 
as an answer • to a decision point Question is used to 

40 derive the next group of Questions. Occasionally, the 
only difference between the two groups of Questions is 
the inclusion or exclusion of a particular Question. 
One solution is to create two identical groups, one 
with the optional question and one without and rely on 

45 the decision point mechanism. In the preferred 

embodiment, an optional parent -child relationship 
between Questions is created. The inclusion/exclusion 
of a Question (child) in a group is based on the 
answer to a previous Question (parent) . A child 

50 Question maintains a reference to one of the possible 
choices (RegistryEntry) of the parent Question. If the 
parent Question's answer is the same as the child 
Question's parentAnswer , the child Question is 
included in the group; otherwise, it is excluded . from 

55 the group. 
TFNM 

As mentioned above, another application of the 
suite of telecommunications network management 
applications is the toll free network management tool 
60 800 as shown in Figure 26. Referred to herein as 
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"TFNM, " the toll free network management tool 200 
provides the client GUI and middle- tier service that 
enable customers to request, specify, receive and view 
data pertaining to their toll free network management 
5 assets, e.g., toll free number routing plans, and to 
generate orders for changing aspects of the routing 
plans via a World Wide Web interface. Particularly, 
customer directives are entered by the user 100 via a 
TFNM graphic user interface. These directives are 

10 preferably communicated as Java applets over secure 

TCP/IP socket connections for input over the firewall 
25a to at least one secure Web server 24, e.g., a DMZ 
Web server that provides for authentication, 
validation, and session management in the manner as 

15 described herein. In view of Figure 26, as will be 

described, the TFNM tool 800 implements a TFNM domain 
server 84 0 which is one component part of a back-end 
MCI infrastructure comprising: MCI's NetCap system 
240, a Service Control Manager 290a ("SCM"), and Data 

20 Access Points 290b ( "DAP" ) . Particularly, the legacy 
NetCap order entry system 290 processes (i.e., edits, 
validates, logs) call routing feature orders for 
customer's 800/8xx traffic and submits orders to the 
Service Control Manager ("SCM") which then formats and 

25 distributes orders to each of three redundant data 
access points ("DAPS") which implements the plan 
orders at the network switches. Once an order is 
implemented on the DAPS, calls to the customer's 
800/8xx number are processed with the features 

30 specified in the order. The TFNM server 840 

interfaces with the "NetCap" 29 0 mainframe system that 
provides user interface to the network control system, 
i.e., DAP switches 290b. The TFNM domain server 840 
includes Java object classes whose methods are invoked 

35 by Java applets running on the customer browser. The 
browser Java applets specifically execute the customer 
directives by invoking certain methods on the TFNM 
Domain server 840. These Java objects additionally 
provide the interface functions to the NetCap 240. In 

40 the preferred embodiment, the Java objects at the TFNM 
domain server function as a proxy, and are invoked 
remotely implementing a Java remote method invocation 
"RMI"-like methodology. 

Particularly, as described herein with respect to 

45 Figure 3, within the networkMCI Interact framework for 
producing Java applications over the Internet, there 
is provided common objects and an infrastructure 
allowing secure communications between a client (which 
resides on a browser) and a server (which resides 

50 safely within MCI's firewalls) . As briefly mentioned, 
the security strategy includes: encrypting 
communication from the client to the web -server via 
SSL (HTTPS) and implementing HTTPS as the preferred 
method for allowing communication into the web server 

55 from the Internet; providing an additional firewall 
between the web -server and the dispatcher to allow 
only specific traffic from the web server to the 
dispatcher to occur; encrypting traffic between the 
web server and the dispatcher via DSA encryption; and 

60 enabling the dispatcher to validate all packets 
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destined to internal MCI servers to ensure that they 
are from an authenticated client, and that a 
particular client has permission to communicate with a 
specific back-end server. To make this seamless for 
5 the client, the aforementioned set of common objects 

performs this messaging. In the preferred embodiment, 
the invention implements a modified RMI which is 
referred to as "CORMI" (Common Objects RMI) which 
provides an RMI -like interface between the client and 
10 the server using the networkMCI Interact protocol. 
The CORMI procedures implemented have additional 
controls built in to provide the necessary session 
security and maintenance for communication over the 
firewalls . 

15 More specifically, CORMI is nMCI Interact' s 

protocol for providing secure, client- to- server 
communication with Java RMI -like semantics and 
comprises a library of Java classes used by both the 
client applet and server application. In view of 

20 Figure 26, the communication path from the client and 
the server is as follows: 

The TFNM server application 840 registers remote 
objects with CORMI ' s CORemoteSessionServer (analogous 
to Java RMI ' s Registry service) and then blocks 

25 waiting for connections. The TFNM client applet 

initiates communication by performing a logon through 
a COClientSession object. The COClientSession creates 
a COSynchTransaction (an atomic unit of work based 
over an HTTPS socket) which connects to the MCI 

30 Interact system dispatcher server 835 (which is behind 
the outer firewall 25 (b) ) and interfacing with StarOE 
server 39. The dispatcher server 26 validates the 
client's authorization to logon (a process that 
involves contacting the StarOE service and generating 

35 a session key with a 'cookiejar' process). After 

validating trie client, the dispatcher uses a round- 
robin protocol to select a TFNM server and then opens 
an HTTPS connection to an instance of the TFNM server 
application. On this server, the 

40 CORemoteSessionServer creates a new session for this 

client and records the session key. 

A reply to a logon is sent back through the 
dispatcher server 235 to the client 20. The client 
then can do a lookup which results in a serialized 

45 remote interface of the remote object registered 

earlier being passed back to the client. The client 
can then use this remote interface as it would with 
Java RMI— doing remote method invocations. The remote 
method invocations are handled by CORMI as 

50 COSynchTransactions through the dispatcher to the same 

TFNM server instance that the logon and interface 
lookup took place at. 

It should be understood that there is no 
permanent connection between the TFNM client and~ 
55 server; CORMI, through a COSynchTransaction, creates a 
new HTTPS connection to the dispatcher (and the 
dispatcher creates a connection to the TFNM server) 
for each unit of communication. 
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After the above- described logon, authentication 
and entitlement processes, the user is presented with 
the nMCI Interact home page (Figure 5(a)) whereby the 
user may select the Network Manager icon 89 to enter 
5 into the TFNM system. Upon selection of the Network 

Manager icon, a client TFNM application is downloaded 
to the customer who is presented with the TFNM web- 
page display -1640 , such as shown in Figures 27(a)- 
27(c) . As shown, this TFNM web-page display presents 

10 a variety of TFNM file menu options including: 1) an 

option 1645 enabling a user to select a Corp ID, i.e., 
a corp, set, number, and plan to establish a working 
environment; 2) an option 1646 enabling a user to cut- 
through to a 3270 mainframe NetCap application; 3) an 

15 option 1647 enabling a user to Implement Plan, i.e., 
put a plan in use by creating an IMPL order; and, 4) 
an option 1648 enabling a user to modify the 
termination information on a plan by creating a QUIK 
order. As further shown in Figure 27(b), the open 

20 menu includes a Plan option 1642 which allows the user 
to select from a list of plans in the current working 
environment and enables opening of the plan in a 
graphical mode on a VORT (''View Only Routing Tree 7 '), 
as will be explained; and a Tree View option 1643 

25 which displays the last plan accessed on the VORT 

screen. As further shown in Figure 27(c), the report 
menu includes an option 1644 for allowing the user to 
set up and execute an order filter query which results 
in the display of an order list, as will be 

30 hereinafter described in greater detail. 

Thus, the customer is enabled to select a view of 
his/her routing plans in accordance with that user's 
privileges. To determine privileges, TFNM user 
security profile information is requested from StarOE 

35 that comprises a list of Corp Ids and Accessld 
combinations, referred to herein as "RACF ID" 
combinations that the customer is allowed to access 
within TFNM. Particularly, user security profile 
elements obtained from StarOE include: Corp Id, i.e., 

40 the Corporation Id the customer user has access to 

within StarOE; and Defaultlnd , i.e., a default Corpld 
indicator having, for example, 'Y' or ' N' values. 

Once the customer has logged into TFNM and has 
received the StarOE security message, a communication 

45 is made from the TFNM server 840 to NetCap 290 

requesting a user security profile. Particularly, the 
messaging system implemented for all communications 
between the TFNM server and NetCap is referred to 
herein as "Registry", such as shown and described in 

50 commonly- owned, co-pending U.S. Patent Application No. 

08/560,550, the contents and disclosure of which are 
incorporated by reference as if fully set forth 
herein. Security from NetCap is by Racf Id and Corp 
Id. For each Corp Id a user has access to, that -user 

55 must have a Racf Id. If a user has Enterprise level 

security, then the list of Corps under that Enterprise 
within NetCap have the same security as the 
Enterprise. Particularly, in response to a user 
login, in the preferred embodiment, a TFNM server 

60 application is executed. From this application, the 
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TFNM server instantiates a Profile Manager Java object 
which is registered with CORMI and called upon to 
invoke further objects relating to the following: user 
profile, e.g., preferences, user security profiles, 
5 i.e., for tracking customer entitlements/privileges 
including rights for creating or modifying specific 
TFNM routing plans or generating QUIK or IMPL orders; 
and, session management, i.e., objects which 
encapsulate the state and behavior associated with a 
10 specific user login, e.g., time logged in. 

In the preferred embodiment, once profile manager 
is instantiated, the TFNM server additionally 
instantiates objects related to view screens and 
options according to the user's 

15 entitlements/privileges. Specifically, a Corporation 
Manager ( "CorpMngr" ) object is invoked to enable the 
user to select the corporation having the desired 
routing plan to be looked at. Then, the following 
objects are sequentially invoked: a Set Manager object 

20 for the corporation selected; a Number Manager object 
that knows the TFNM numbers (e.g., l-800/8xx) 
belonging to the Set and/or Corp; and, a Plan Manager 
object, which knows the routing plans that belong to 
the selected corporation, set, and/or number selected 

25 by the user up to that point. It should be understood 
that the TFNM server is enabled to communicate with 
NetCap server for this data if not provided in the 
TFNM database, or, if the information in TFNM is not 
current. For instance, for some messages, a data sync 

30 may always be invoked. Thus, TFNM may contact NetCap 
and pass date and time stamps indicating the last 
update for the record. If NetCap determines that they 
have later data version, it will pass down the updated 
version, otherwise, it will pass an empty message back 

35 to TFNM. Alternately, an internal table 845, as shown 
in Figure 26, may be accessed indicating the intervals 
for data record updates and which will indicate the 
last time a data sync was performed for a particular 
record. By checking this table, a determination may 

40 be made as to whether contact must be made to NetCap 
for a data update. 

In the preferred embodiment, as shown in Figure 
26, the TFNM server 840 communicates a plan/data sync 
message 843 via Registry messaging to NetCap. The 

45 Registry message call "NPSNC" is the request to sync a 
plan and transmit from the TFNM server to NetCap. A 
variety of Registry response messages for this request 
may be provided. 

As shown in Figure 27(d), the File/Select Corp ID 
50 menu option causes a screen 165 0 to be displayed in 

the web page that enables the user to select elements 
(Corp ID, Set ID, Routing Number) that invoke objects 
for establishing a working environment, or, to select 
a plan for view. The data elements displayed on -this 
55 screen differ according to the type of plan chosen. 

In the preferred embodiment, the TFNM Network Manager 
component 8 00 enables the customer to create or modify 
orders for four types of TFNM routing plans: a Number 
Level Plan ("NLP"), Super Routing Plans ("SRP"), 
60 Enhanced Voice Service Routing plans ("EVS"), and 
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universal routing plans ( "URP" ) . As shown in Figure 
27(d), Number Level, EVS , or Super Routing plan radio 
buttons 1655 may be selected to access corresponding 
visible screen elements. When an NLP plan is 
5 selected, for instance, the following elements are 
displayed: a Corp ID element 1656 which is a single 
selection list box that becomes populated with corp 
id's available to the user in accordance with that 
user's entitlements; a Set ID element 1657 which is a 

10 single selection list box populated with Set ID'S that 
the user has security access to for a chosen Corp ID; 
a Number list box element 1658 which is a single 
selection list box populated with number information 
for the indicated corp. /set; and, a Plan list box 1659 

15 which is a single selection list box populated with 

plan information such as: a plan description, plan in 
use, or when the plan was last modified, for the 
selected number. It should be understood that 
corporate security is obtained from NetCap whenever a 

20 new Corp ID is selected, in the manner described. 

In the preferred embodiment, using additional 
buttons 1652, 1653 and 1654 from the screen shown in 
Figure 27 (d) , the user respectively, is enabled to 
open or close the "plan" portion of the screen; save 

25 the selected corp/set/number /plan id as the user's 

current working environment; and/or display a tree 
view of the highlighted plan. 

When the user chooses to view a selected routing 
plan, and after verifying security with both StarOE 

30 and NetCap, the TFNM server may execute the synch 

process with NetCap 29 0 as described above. During 
this process, TFNM updates any records in the TFNM 
server copy of the customer's chosen routing plan with 
changes that were made in NetCap since the user last 

35 accessed the system. The TFNM server database is 

updated with the latest routing plan information for 
that customer, and the updated routing plan 
information is sent to the user, as indicated at step 
333. The customer is now presented with the requested 

40 routing plan view via the TFNM client application. 

A user may view a routing plan in several 
formats, e.g., a hierarchical tree graphic or a 
spreadsheet. In the preferred embodiment, as shown in 
the exemplar screen display 1660 of Figure 27 (e) , the 

45 Routing Plan is displayed as a tree structure 

comprising of a series of linked node types in a 
specific hierarchy. As shown in Figure 27 (e) , the 
screen is divided into two main sections: a first 
section 1662 comprising the graphical representation 

50 of the routing tree having nodes tree branches that 
can be expanded and collapsed; and, a second section 
1663 for displaying the details of the currently 
highlighted tree node. The node types that are 
available include: 1) a Plan node 1666a which isr shown 

55 highlighted in Figure 27 (e) and details the features 
for the plan; 2) an Origination node ("ORIG") 1666b 
which details the geographical elements used in 
determining where to route the call. Multiple 
Origination nodes may exist under a plan node; 3) a 

60 Day of Week node ("DOW") 1666c which details how to 
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route calls based on days of the week. Multiple Day 
of Week nodes may exist under an Origination and all 
seven days of the week must be accounted for under 
each origination; 4) a Time of Day node ("TOD") 1666d 
5 which details specific time ranges for routing calls. 
Multiple Time of Day nodes may exist under a Day of 
Week and all 24 hours of the day must be accounted for 
under each Day of Week; and, 5) a Percent Logical 
Termination node ("%LTERM") 1666e which details where 

10 the calls terminate and at what percentage of the 

time. As shown in Figure 27(e), multiple %LTERM nodes 
may exist under a Time of Day. The percentages in 
"sibling" nodes must add up to 100 percent. A user 
can select details of any node by clicking or 

15 scrolling. Trigger Points (not shown) may also be 

displayed as children of the node they ride on. For 
example, a Trigger Point that rides on an Origination 
node would be displayed under the Origination on the 
same level as a Day-of-Week node. At each node, 

20 decisions related to the call routing are executed. 

As further shown in Figure 27 (e) , for a plan 
node, the corresponding plan detail screen 1663 is 
populated with the existing plan description; the Orig 
id of the default orig on the plan; and Origination 

25 Features having values derived based on the features 

in use on the plan. Likewise, for an origination node 
1666b, the corresponding plan detail screen displays: 
the ID of the highlighted origination node and the 
corresponding description including listboxes 

30 displaying the geographic elements (countries, states, 
area codes and exchanges) associated with the 
highlighted Origination node. For the DOW node 1666c, 
the corresponding plan detail screen displays the Day 
Id of the DOW node and the list of days associated 

35 with the DOW node. For the TOD node 1666d, the 

corresponding plan detail screen displays the list of 
time ranges associated with the TOD node. For the 
Termination node 1666e, the corresponding plan detail 
screen displays: the ID of the termination associated 

40 with the highlighted node; a description of the 

termination associated with the highlighted node; an 
indication of whether a cross corp term is associated 
with the highlighted node, and, if the Cross Corp Term 
indicator is "Yes," a field displaying the cross corp 

45 Id associated with the termination in the Termination 
ID field; and an indication of the percentage of calls 
allocated to this termination node. Further details 
may be displayed including a Details tab (not shown) 
for displaying: the customer service id associated 

50 with the termination; the activation date of the 

termination; the activation date received associated 
with the termination; the service status associated 
with the termination; the Switch Trunk ID associated 
with the termination; and, an indication of whether 

55 the termination is EVS ; whether the Termination has a 

real-time ANI Delivery and, the activation date for 
the Real Time ANI. Additionally, an ANI tab (not 
shown) may be displayed for presenting the user with 
information as to whether the termination has an 

60 Automatic Number Identifier ("ANI"), the country code 
associated with the termination and the Termination 
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ANI . An "Overflow'' tab of the termination details 
screen displays for the user: a network call redirect 
indicator indicating whether the termination has an 
NCR; a direct termination overflow indicator 
5 indicating whether the termination has a DTO. 

Likewise, a "DNIS" tab (not shown) may be displayed 
for presenting the user with information as to whether 
DNIS/Enhanced DNIS is active on the termination; the 
date that DNIS is activated; an indication of whether 

10 the Dialed Digit Outpulsing (DDO) is active on the 

termination; the prefix digits used for DNIS, and the 
number of digits to be reused for DNIS. Finally, an 
"International Outbound" tab (not shown) may be 
displayed for presenting the user with information as 

15 to whether international outbound is active on the 

termination; the Country code associated with the 
termination if international outbound is active; the 
Carrier code associated with the termination if 
international outbound is active; and the free phone 

20 number associated with the termination if 
international outbound is active. 

Via the TFNM Client Application, the user is now 
able to invoke TFNM functions such as the "IMPL" 
depicted in Figure 26 as the IMPL request 822 which 

25 enables the user to quickly change the number routing 

plan that a working number or set of working numbers 
is routing to; or "£UIK" depicted in Figure 2 6 as the 
QUIK request 824 which enables the user to quickly 
add, change and/or delete one or more termination 

30 locations, and/or change the percentage allocation of 
two or more of these locations, for a currently 
implemented routing plan. In accordance with the 
present invention, additional directives may include: 
a temporary ("TEMP") IMPL directive which is created 

35 in conjunction with an Impl by entering a roll -back 

date so that the routing plan will revert to its prior 
use status prior to creation of the Impl; and a TEMP 
QUIK directive which enables roll -back of the changes 
made by a QUIK order to what they were before the 

40 QUIK. 

For the case when a user desires to implement the 
IMPL/TEMP IMPL plan, or the QUIK/TEMP QUIK, the user 
selects the Setup IMPL from the TFNM screen. 
Specifically, the TFNM Client application causes the 

45 instantiation of an "Order Manager" object which 
invokes methods capable of accessing all the 
information pertaining to orders for a given corp id, 
set, TFNM telephone number and plan. An order 
comprises two components: 1) an order administration 

50 record comprising data such as: order status, 

effective data time and order number, etc.; and, 2) 
order administration detail record which includes the 
detailed information pertaining to that order, e.g., 
changes to percent allocation or effective dates/itimes 

55 etc. for a plan, etc. The Order Manager object 

includes an ImplOrder sub -class which knows about IMPL 
orders, e.g., IMPL functionality, and invokes objects 
to obtain order records, pertaining to plans. As 
mentioned, an IMPL order allows a user to change which 
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routing plan they want to be "in use" for a specific 
number or a set of numbers . 

Figure 27(f) illustrates the IMPL dialog screen 

1670 enabling the user to generate a TEMP IMPL/IMPL 

5 order for the desired Corp Id. Particularly, as shown 
in Figure 27(f), a number/set selection dialog box 

1671 is displayed having radio buttons enabling 
selection of the desired 800/8xx Number, a set of 
numbers, a reserved number; or, an EVS Number for 

10 implementing an EVS plan. Selection of one of these 
will invoke a "data controller" object for retrieving 
information from a TFNM database causing a 
corresponding dialog to appear enabling user search 
for the desired 800/8xx Number, set, reserved number, 

15 or EVS Number for the desired Corp Id. After 

selecting the desired number or set, the user is 
prompted to select from dialog box 1672 the specific 
plan type that is to be IMPL ' d for the number or set. 
As shown, the dialog box 1672 comprises radio buttons 

20 enabling user selection of the desired plan IDs 

including, but not limited to, a Number Level Plan 
( "NLP" ) implemented for an 800/8xx Number or a set of 
numbers, a Super Routing Plan (SRP) implemented for an 
80 0/8xx Number, a set of numbers, or a reserved 

25 number; and, an EVS plan implemented for an EVS 

Number. It should be understood that if the user has 
privileges for only one Corp ID, the system will 
select only the plans associated with that Corp ID for 
the user. If the user has privileges for more than 

30 one Corp ID, the user is presented with a list of all 
Corp IDs and will select one Corp ID. Any subsequent 
actions the user takes within the application are 
applicable to that selected corporation. 

After having selected the Corp, set, Routing Plan 

35 Number or Routing Plan ID, the user may set or modify 
the routing plan. In the preferred embodiment, the 
user can define the routing plan according to any of 
the above- described options: Origin, Country, State, 
NPA, NXX, Day of week, Time of day, and Termination. 

40 These options can be defined for each Corp ID, Set or 
number. In the preferred embodiment, the user is 
enabled to implement NLPs, SRPs , and EVSs and URPs for 
a selected toll free number or, implement NLPs and 
SRPs for a set of numbers that they want routed 

45 differently. Via IMPL request messaging, the user 
selects the desired routing plan for the number/set 
and the desired date and time when they want to start 
routing the number to the selected plan and forwards 
the request to the TFNM server via HTTPS messaging. 

50 As shown in Figure 26, the customer's Send IMPL 

request 822 is communicated over the HTTPS connection 
as a request to invoke methods in the Order Manager 
class/sub - classes via CORMI . Once the plan has been 
submitted to the TFNM server via the send IMPL message 

55 822, the TFNM server receives the new routing plan and 
verifies the user's security with NetCap. Once the 
user's security has been verified, the TFNM server 
submits the IMPL request to NetCap 29 0 via Registry 
messaging. Particularly, the Order Manager 

60 classes/sub - classes execute methods for translating 
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the IMPL order in a form suitable for submission to 
NetCap . 

Included in the Registry message calls that are 
transmitted from the TFNM server to NetCap for the 
5 IMPL/TEMP IMPL order and the corresponding NetCap 

responses is the message for submitting an IMPL order 
(NIMPL) to NetCap. 

It should be understood that, in the case of a 
user implementing a TEMP IMPL request, the user 

10 follows the same procedure as for the IMPL order, 

e.g., selecting the desired routing plan for the 
number/ set and Corp Id. However, as shown in Figure 
27(f), the user is presented with a dialog 1673 for 
submitting the desired date and time when the user 

15 wants to start routing the number to the selected 

plan, and, a dialog 1674 for submitting the roll back 
date and time when they want the previous routing plan 
to be effective again. Thus, both an IMPL and TEMP 
IMPL message pair is sent to the TFNM server for 

20 processing as described herein. 

After a TEMP IMPL and/or IMPL request has been 
transmitted to NetCap 290, it is stored for future 
implementation. In view of Figure 26, NetCap sends an 
acknowledgment via Registry messaging back to the TFNM 

25 server. 

Included in the Registry message calls that are 
transmitted to the TFNM server from NetCap in response 
to the submitted IMPL order is the message indicating 
successful processing of the IMPL request (NSUCS) and 

30 the message indicating completion of the order in 
NetCap (UCOMP) . The TFNM server passes this 
information on to the user via CORMI messaging over 
the HTTPS connection. If the user is still logged on, 
this acknowledgment appears as a pop -up message on 

35 their screen, as indicated via line 826 in Figure 26. 

If the user has logged off, TFNM retains the 
acknowledgment that the IMPL has been received and 
saved for the next user logon. Likewise, when an IMPL 
has been transmitted to NetCap and either implemented 

40 or terminated, NetCap sends a registry message back to 
the TFNM server which, in turn, passes this 
information back to the user via HTTPS connectivity. 

The user of the TFNM system may instead desire to 
execute the QUIK feature that enables customers to 

45 quickly add, change and/or delete one or more 

termination locations (nodes) , and/or change the 
percentage allocation of two or more of these 
locations, for a currently implemented routing plan, 
Figure 27(g) illustrates an exemplary web-page screen 

50 1680 instantiated by the TFNM client application for 

the QUIL/TEMP QUIK order process which is presented to 
the user. As shown in Figure 27(g), there is provided 
a number of radio buttons which the user may select: 
1) an 800/8xx number button 1682 which causes a dialog 

55 to be displayed for enabling the user to enter or 

select an 800/8xx number from a list of 800/8xx #'s 
(not shown) having an associated ''plan in use." Once 
the 800/8xx # is entered, the system returns the 
corresponding NLP or SRP Plan in use; 2) an SRP button 

60 1684 which causes a dialog to be displayed for 
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enabling the user to enter or select an SRP Id from a 
list (not shown) . Once entered, the system returns 
the SRP Routing Plan for the SRP Id; 3) an EVS button 
1686 which causes a dialog to be displayed for 
5 enabling the user to enter or select an EVS number. 

Once entered, the system returns an EVS Plan In Use if 
available. In each dialog, a corresponding "data 
controller" object is invoked for retrieving 
information from a TFNM database causing a 
10 corresponding dialog to appear enabling user 
selection . 

After selecting the desired plan, the user is 
required to key or select each of the following 
buttons: Origination Id/Description 1687, Day of Week 

15 Id/Desc. 1688, and Time Begin/Desc. 1689. Selection 

of the Origination Id/Description button 1687 causes a 
list of Origination Id and corresponding descriptions 
to be displayed. In this manner a user may scroll 
through the list and identify the branch comprising 

20 the terminations that are to be modified. Likewise, 

selection of the Day of Week Id/Desc. button 1688 
causes a list of Day of Week node ids/descriptions to 
be displayed for the selected Origination Id node and 
through which the user may scroll through and select 

25 for modification. Similarly, selection of the Time 

Begin button 1689 causes a list of Time of Day node 
ids/descriptions to be displayed for the selected DOW 
and through which the user may scroll through and 
select for modification. Through use of the Order 

30 Manager classes/sub- classes the system auto -populates 
the Orig, DOW, TOD, and, once populated, the system 
displays in display field 1692 the Lterms for the TOD 
node which comprise the terminations and percent 
allocations. In the preferred embodiment, the user 

35 may change percentage allocations by overtyping the 
amount or using the spin box up/down arrows 169 0 
(increments of 1 percent) . The user may additionally 
modify the percentages for the remaining 
termination (s) as long as the sum of the percentages 

40 for all the terminations attached to the selected Time 
interval node eguals 100 percent. Action keys 1695a- 
1695d may additionally be enabled for user selection 
in accordance with enterprise business rules and/or 
user security. Specifically, key 1695a enables the 

45 submission of the QUIK/TEMP QUIK order to NetCap for 
approval (Issue key) . Key 1695b allows the user to 
add a termination to the TOD node (including cross - 
corp terms that the customer has cross corp agreements 
with) , or change the termination id, description, or 

50 percent allocated to the termination for this plan. 

Preferably, selection of key 1695b enables display of 
a web page having a Termination screen enabling these 
choices. Key 1695c enables the user to select the 
termination that the user wants replaced and presents 

55 the user with the Termination screen to select the 

term for change (Change Term key) . The key 169 5d 
enables the user to select the term they want to 
delete on the selected routing branch. In the 
preferred embodiment, the system defaults effective 

60 date/ time to the current date/ time, however, the user 
may enter a future rollback date/time up to 1 year in 
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the data and time entry fields 1696a, b in Figure 
27 (g) . If the user enters a Rollback date/time in the 
rollback date fields, the system generates a TEMP QUIK 
order that sets the Routing Plan back to its state 
5 before the QUIK order. Preferably, the Rollback 
date/time may not be greater than 1 year in the 
future . 

Thus, from the dialog box 1680 (Figure 27(a)), 
the user is enabled to perform the following: 1) 

10 change one or more terminations for NLP or SRP; 2) 
replace one or more terminations on an EVS Routing 
Plan; 3) change the percent allocation of currently 
implemented NLP, EVS , or SRP Plan; 4) add one or more 
terminations to the currently implemented NLP or SRP 

15 Plan; 5) add one or more terminations to an EVS 

Routing Plan; and, 6) delete one or more terminations 
from the currently implemented plan of an NLP, EVS or 
SRP Plans. It should be understood that, in the case 
of a user implementing a TEMP QUIK request, the user 

20 selects the desired routing plan for the number/set, 
the desired date and time when they want to add, 
change and/or delete one or more termination locations 
and/or percentage allocation of these locations for a 
currently implemented routing plan, and, optionally, 

25 the roll back date and time when the changes are to 

revert back to their original settings. Thus, a QUIK 
and TEMP QUIK message pair is sent to the TFNM server 
for processing as described herein. 

Referring back to Figure 26, the customer's Send 

30 QUIK request 824 is communicated by the TFNM client 

applet by communication between the Dispatcher server 
235 and the TFNM server objects using CORMI . The 
Object manager /sub- classes execute methods for 
translating the QUIK/TEMP QUIK order in a form 

35 suitable for submission to NetCap. 

Included in the Registry message calls that are 
transmitted from the TFNM server to NetCap for the 
QUIK/TEMP QUIK order and the corresponding NetCap 
responses is the message for submitting an QUIK order 

40 (NQUIK) to NetCap. 

Once the plan has been submitted to the TFNM 
server via the send QUIK message, the TFNM server 
receives the new routing plan and verifies the user's 
security with NetCap. Once the user's security has 

45 been verified, the TFNM server submits the QUIK 
request to NetCap 290 via Registry messaging. 

After a TEMP QUIK and/or QUIK request has been 
transmitted to NetCap, it is stored for future 
implementation. In view of Figure 26, NetCap sends a 

50 registry message to the TFNM server acknowledging that 
the request has been stored. 

Included in the Registry message calls that are 
transmitted to the TFNM server from NetCap in response 
to the submitted QUIK order is the message indicating 

55 successful processing of the QUIK request (NSUCS) and 
the message indicating completion of the order in 
NetCap (UCOMP) . The TFNM server then passes this 
information on to the user via CORMI messaging over 
the HTTPS connection. If the user is still logged on, 
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this acknowledgment appears as a pop -up message on 
their screen, as indicated via line 826 in Figure 26. 
If the user has logged off, TFNM retains the 
acknowledgment that the QUIK order has been received 
5 and saved for the next user logon. Likewise, when a 
QUIK has been transmitted to NetCap and either 
implemented or terminated, NetCap sends a registry 
message back to the TFNM server which, in turn, passes 
this information back to the user via HTTPS 

10 connectivity. 

As described, a change to a routing plan is saved 
locally before being submitted to NetCap. The 
submission happens when the plan changes are converted 
into an approved order having an approved order admin 

15 record and with a condition that NetCap has no 
preceding orders queued against the plan. The 
submission process takes place in two steps: first, 
the order admin record is sent to NetCap immediately, 
and second, when no orders are pending against the 

20 plan, the order admin detail record is then sent. The 
delay results because NetCap does not queue more than 
one order against a plan at a time. The TFNM server 
is configured to hide this limitation by stacking 
orders - a process of accepting multiple submissions 

25 and queuing them internally for later transmission to 
NetCap. The order admin record is sent immediately. 
The order admin detail record is sent soon as possible 
thereafter . 

Further functionality provided by the TFNM server 

30 is the ability to open plans, i.e., display a list of 
routing plans under the current working environment 
for display as a VORT (Figure 27 (e) ) , or, view orders 
and filter through orders. Particularly, the TFNM 
client will instantiate the Order Manager object which 

35 instantiates order administration detail objects and 
other objects for retrieving administrative records 
comprising the details for a particular order in the 
TFNM database. For example, selection of the Report 
Order menu option shown m the screen display of 

40 Figure 27 (c) , will cause the display of an order 

filter screen enabling a user to enter elements that 
they would like to use to query for orders and submit 
order queries. The results of an order query are 
displayed in an order select list 1698, such as shown 

45 in Figure 27(h) . From this list, a user can retrieve 

details pertaining to an order, or, change an order's 
status or update remarks. Particularly, from an 
administration button 1699, the user is presented with 
a dialog 1700 as shown in Figure 27 (i) , for example, 

50 enabling the user to update the order status and the 
effective date/time. It is from these dialogs that a 
user may select a button 17 0 3 to un- approve an order 
(if the selected order has been approved by NetCap) 
and, a button 1704 to "zap" (delete) an existing - 

55 order. 

The Registry message calls that are transmitted 
from the TFNM server to NetCap also include those for 
un- approving an order (NOUAP) , zapping an order 
(NOZAP) , and, requesting pending order data (NPIUO) . 
60 Corresponding NetCap responses are provided. 
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It should be understood that, in accordance with 
the principles described herein, the TFNM management 
tool of the invention is capable of supporting 
"feature" orders, i.e., functionality enabling 
5 customers to add a new TFN routing plan, e.g., NLP, 
SRP, URP, or EVS, or, change other the attributes or 
structure of an existing -plan, e.g., changing 
attributes of a routing plan directly from the VORT 
(Figure 24(b)). The TFNM tool additionally may 

10 provide "drag and drop" enabling users to configure 
routing elements between plans. 

Although the TFNM web/Internet network management 
tool has been described herein with respect to a 
customer's toll-free, e.g., 1 - 80 0/ 8xx networks , the 

15 principles may be readily applied to other types of 
telecommunications network numbers. 



ONM 

Another application of the suite of 

20 telecommunications network applications is the 
networkMCI Interact Outbound Network Manager 
application 2700. Referred to herein as "ONM," the 
outbound network management tool 27 0 0 provides the 
client GUI and middle -tier service that enable 

25 customers to manage and track Calling Party Number 

Orders, Calling Card Orders, Dialing Plan Orders, and 
ID Code Set Orders relating to their private networks 
such as Vnet and Vision networks. 

As shown in Figure 28, the ONM tool 27 00 of the 

30 invention implements an ONM domain server 2750 

integrated with a back-end MCI intranet and legacy 
system infrastructure comprising above- described MCI's 
NetCap order entry system 290, Service Control Manager 
290a ("SCM") and Data Access Points 290b ("DAP"). The 

35 ONM server 2750 enables customers to change t their 

Vnet/Vision network management plans, both in real- 
time and on a scheduled basis, via nMCI Interact 's 
web-based front -end and middle- tier infrastructure. 
Particularly, customer order directives are entered by 

40 the customer 2 0 via an ONM graphic user interface. 

These directives are preferably communicated as Java 
applets over secure HTTPS socket connections 2722, 
2724 for input over the firewall 25(a) to at least one 
secure server, e.g., a DMZ Web server 24 that provides 

45 for authentication, validation, and session management 
in the manner as herein described. After validation 
and authentication, the DMZ Web server 24, in turn, 
re -encrypts messages and dispatches them to the 
Dispatcher 26 server over TCP/IP connection 2734. The 

50 Dispatcher server may implement an ONM proxy 27 3 5 

which properly receives ONM order messages from the 
web server, and translates them into a format suitable 
for transmission over another TCP/IP connection 2736 
to the ONM domain server 2750. As will be described, 

55 the ONM domain server 27 5 0 interfaces with the 

"NetCap" 290 mainframe system that provides user 
interface to the network control system, i.e., DAP 
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switches 290b (Figure 6) . The ONM domain .server 2750 
may include Java object classes whose methods are 
invoked by Java applets running on the customer 
browser. The browser Java applets specifically 
5 execute the customer directives by invoking certain 
methods on the ONM Domain server 2750. These Java 
objects additionally provide the interface functions 
to the NetCap 290. In the preferred embodiment, the 
Java objects at the ONM domain server function as the 
10 ONM proxy, and are invoked remotely implementing a 

Java remote method invocation "RMI"-like methodology. 

Particularly, as described herein with respect to 
Figure 2, within the networkMCI Interact framework for 
producing Java applications over the Internet, there 
15 is provided common objects and an infrastructure 

allowing secure communications between a client (which 
resides on a browser) and a server (which resides 
safely within MCI's firewalls). As described, the 
security strategy includes: encrypting communication 
20 from the client to the web- server via SSL (HTTPS) and 
implementing HTTPS as the preferred method for 
allowing communication into the web server from the 
Internet; providing an additional firewall between the 
web -server and the dispatcher to allow only specific 
25 traffic from the web server to the dispatcher to 

occur; encrypting traffic between the web server and 
the dispatcher via DSA encryption; and enabling the 
dispatcher to validate all packets destined to 
internal MCI servers to ensure that they are from an 
30 authenticated client, and that a particular client has 
permission to communicate with a specific back-end 
server. To make this seamless for the client, the set 
of Common Objects performs this messaging. In the 
preferred embodiment, a "CORMI" (Common Objects RMI) 
35 which provides an RMI -like interface between the 

client and the server using the networkMCI Interact 
protocol is implemented. The CORMI procedures 
implemented have additional controls built in to 
provide the necessary session security and maintenance 
40 for communication over the firewalls. 

After customer logon, authentication and 
entitlement determination, a networkMCI Interact 
applet is downloaded to the customers Web Browser via 
the established TCP/IP connection, and the browser 
45 presents the customer with the networkMCI Interact 

systems home page including a Network Manager icon 89 
(Fig. 5(a)). Selection of this icon, enables a client 
ONM application to be downloaded to the customer who 
is then presented with the ONM screen, as indicated at 
50 step 318. 

An exemplary ONM web-page display 2764 is shown 
in Figure 29 (a) which presents a variety of ONM menu 
options including: 1) a File menu option 2702 
providing a selection 27 04 for creating a new order, a 
55 selection 2706 for opening an existing order, a 

selection 2708 for displaying events, and a selection 
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2710 for enabling 3270 cut through to a Vn,et/Vision 
configuration management system; 2) an Edit menu 2715 
providing options for deleting an ONM order or, 
enabling a search for specific components, e.g., 
5 within an Order detail and Inventory windows 

pertaining to a Calling Party Number ( "CPN" ) , Calling 
Card, Dialing Plan, and ID Code/Set, such as will be 
described; 3) a Control menu 2720 providing a refresh 
option to enable a user to retrieve a list of all 

10 updated lists that have been altered on the host 

system including: Network IDs, Range Privileges, ID 
Code Set, Billing location ID, Customer Service ID, 
Location/Access type and Provisioning Carrier; and 4) 
a Report menu 2723 providing options enabling a 

15 customer to inquire on his/her inventory of CPNs, 

Calling Cards, Dialing Plans and ID Code Sets. 

With more particularity regarding the File menu 
option 2702, when a user selects the new order menu 
option 2704, he/she is presented with a drop down menu 

20 (not shown) presenting a section of the order types 

which can be created via their Web Browser, e.g., CPN, 
Calling Card, Dialing Plan, and ID Code Set. When the 
user selects the open order selection 2706 from the 
drop down menu of Figure 29 (a) , the user is presented 

25 with a web page 2725 displaying a request order window 
where the user may enter search criteria from which a 
user may select orders, or, choose all orders. As 
shown in Figure 29 (b) , the user may enter the 
following search criteria: an exact order number or 

30 partial order number in the "order match" field 273 0; 

an order type, e.g., Calling Card, CPN, Dialing Plan, 
ID Code Set, or all, from a drop down list presented 
by "order type" drop down menu 2732; a starting date 
or current default date in the "starting date" field 

35 2737; a user ID or default current user ID from the 

"user ID" field 2739; and, a set of order status check 
boxes 2740 which enables the user to choose an order 
status, e.g., not approved, approved, complete, and 
error/rej ected. 

40 When multiple orders are retrieved, as a result 

of an entered search criteria, a web page 2744 
presenting an "Orders" window will appear such as 
shown in Figure 29 (c) . From the Order detail window, 
an order may be selected, e.g., by double clicking an 

45 order summary line 2743. The field descriptions for 
an order displayed in the orders window include: an 
order Number 2745 which is a unique number assigned to 
the order for identification; a currently logged- on 
user ID 2746; the current order status 2747; the order 

50 type 2748, e.g., ID Code, as depicted in Figure 29(c); 

the date the order was prepared 2751, and the 
effective date/time 2752 when the order will be 
implemented in the network by the host. The details 
of an order may be retrieved by highlighting the order 

55 summary line 2743 and pressing the details button 

275453 or, by double- clicking the order summary line 
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2743. It should be understood that the user may 
retrieve a web page having an Order window by either 
selection of a New Order, from Figure 29 (a) , or, 
selection from the Open Orders Window, when retrieving 
5 existing order (s). 

Selection of a new or existing CPN Order option 
via the nMCI Interact ONM system allows a customer to 
"link" or attach network features to any Calling Party 
Number (CPN) that exists in that customer's inventory, 

10 i.e., CPNs that are active in that customer's 

database. Preferably, the following features can be 
defined/linked to CPNs: 1) Multiple Networks; 2) 
Supplemental Codes including ID Codes and Accounting 
Codes; 3) Range Privileges including Universal and 

15 Customized; 4) Data vs. Voice Specification; and 
Extended Enterprise (Location/Access Type) . 

Figure 29(d) illustrates a web page 2755 
comprising a CPN order window comprising the following 
sections: an order administration section 2760 for 

20 handling administrative aspects of the CPN order; a 

CPN inventory section 2770 used to retrieve CPNs from 
inventory that are not included on another order. 
This is accomplished by selection of the retrieve 
button 2775 and enables display of, inter alia, the 

25 CPNs and associated PINs, a description assigned to 

the CPN, and a component count; a CPN updates section 
4 80 which populates the CPN order window by moving 
selected calling cards from the cards in inventory 
section or by adding new calling cards to the current 

30 order; and, an attributes section 279 0 for populating 
an area of the web page screen display 2755 with a 
list of attributes, or features, for a selected CPN in 
the inventory or updates section. 

With more particularity, the CPN order 

35 administration section 2760 of web page display 2755 

comprises the following field descriptions: 1) a field 
2762 enabling a customer to set the date/time when the 
order is to be implemented by the host. For example, 
a default time is the current PC date and time, shown 

40 in the format of MM/DD/YYYY HH:MM (24 hour clock) ; 2) 
a field 2764 enabling the establishment of a priority 
(depending on security access privileges) ; 3) a field 
2766 for describing the order's current status. For 
example, new CPN orders default to "not approved"; 4) 

45 a Remarks text field 2767 optionally used to describe 

the contents of the CPN order; and, 5) an Approve 
field 2768 such that when checked, indicates the order 
is approved and transmitted to the host. After 
transmission, the field name changes to Approved and 

50 the Order Status field displays Approved. It should 
be understood that, if authorized, a customer may 
unapprove an approved order that has not completed by 
reselecting the Approved check box. A pop -up message 
(not shown) in the web display will prompt the 

55 customer to confirm the action. 
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With more particularity , . the CPN inveptory 
section 2770 used to retrieve CPNs from CPN order 
inventory comprises the following field/command button 
descriptions: a CTRY field 2772 including a three; 
5 digit country code for the CPN; a CPN Beginning field 

2774 comprising the remaining digits of the CPN or the 
beginning number within a range; a Description field 
2776 comprising an alphanumeric description assigned 
to the CPN, e.g., the CPN location or company name; a 

10 Component Count field 2778 indicating how many CPNs 
are within the CPNs in Inventory section; a Retrieve 
button 2775 such that, when selected, retrieves a list 
of a customer's available CPNs in inventory that are 
not included in other orders. Selection of this 

15 option will enable a web page display of a Retrieve 

CPNs from Inventory Window 2812 such as shown m 
Figure 29(f); and, a right arrow ">" command button 

2779 enabling a customer to move single or multiple 
(selected) CPNs from the CPNs in inventory section to 

20 the CPN Updates to include in the current order. 

With more particularity, the CPN updates section 

2780 comprises the following field/command button 
descriptions: a status code indication field 2781 
displayed next to a CPN, with the following 

25 designations: a (blank) indication meaning no status; 

an "A" indicating that a new CPN is being added, e.g., 
Stentor customers; a "C" displayed next to CPNs that 
have been changed; and a "D" indicating that a CPN has 
been marked for deletion; a CTRY field 2782; a CPN 
30 Beginning field 2783; a Description field 27 84 ; and, a 
Component Count field 27 87 as described above; a left 
arrow "<" command button 27 8 8 enabling a customer to 
remove a CPN from the current order, and to restore 
its attributes back to those that were last 
35 transmitted to the host, i.e., move one or more 

highlighted CPNs to the CPNs in Inventory section; an 
"Add" command button 2785, e.g., displayed for Stentor 
customers, which presents a web page having an Add New 
CPN window such as shown in Figure 29 (c) ; and, a 
40 "Delete" command button 27 86, e.g., displayed t for 

Stentor customers marks the highlighted CPN displayed 
in the CPN Updates section for deletion. 

With more particularity, the CPN attributes 
section 279 0 comprises the following field/command t 
45 button descriptions: an "Item" field 2792 comprising 
those Vnet/Vision feature items that are listed m 
this column once linked to CPN(s), e.g., Range 
Privilege, ID Code Set, etc.; a "Value" field 2793 
which comprises the defined value of the network 
50 features (e.g., U 001) linked to CPN(s);a "CPN Nbr" 

field 2794 which designates the information displayed 
in the Attributes section is for the selected CPN, 
which can be either in the CPNs In Inventory or CPN 
Updates sections; a "Variable" field 279 5 which 
55 changes according to the item selected m the 

Attributes section and enables customers to add/change 
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information for the selected item, except .when any 
prepopulated information is dimmed; a <Set Dflt> 
button 2796 which enables a customer to define the PC 
default for CPN attributes. Once set, the PC default 
5 values can be applied to other CPNs by selecting the 
<Use Dflt> button 2797 which command provides the 
option of applying either the host default or the 
user- defined PC default attributes for the selected 
CPN. For example, if the Location Type of the current 
10 CPN is "C" , default attributes that would change it to 
"A" or "B" cannot be applied. On the other hand, if 
Location Type "C" was established as a default with 
<Set Dflt>, a pop-up message will prompt the user to 
confirm using it as a default when you select <Use 
15 Dflt>; an <Undo> button 2798 for removing any changes 

made to the selected CPN, and restoring its attributes 
back to those that were last transmitted to the host, 
an <Expand> button 2799 enabling the display of the 
Calling Party Number Attributes window, such as shown 
20 in Figure 29(g); and a <Close> button 2791 for closing 
the CPN Order window. 

The Add New CPN window 2 80 0 such as shown in 
Figure 29 (e) enables a customer, if authorized, to add 
a new CPN to their inventory and assign it attributes. 
25 In the example web page display shown in Figure 29 (e) , 
the Add new CPN functionality includes: assigning a 
provisioning carrier in entry field 2802; adding a 
CPN- From number in entry field 2804; adding a CPN-To 
number in entry field 2806; and, adding a CPN 
30 description in entry field 2808. Preferably, the 

added CPN(s) are displayed in the CPN Updates sectxon 
2780 with the "A" indication 2781 as shown in Figure 
29 (d) . It should be understood that CPN orders may be 
deleted by selecting the delete button 2786 (Figure 
35 29 (d)). 

As mentioned above, selection of the CPN Retrieve 
button 2775 enables a web page display of a Retrieve 
CPNs from Inventory Window 2 812 such as shown in the 
example web page display of Figure 29(f) . From this 
40 window, a customer may specify search criteria or 
retrieve a predetermined amount of CPNs having 
defaulted criteria. Particularly, the Retrieve CPNs 
from Inventory Window 2 812 comprises the following 
field/command button descriptions for retrieving CPNs 
45 from customer inventory: a country field 2 814 for a 
country code from a drop -down list by selecting a 
"down" arrow 2815 when specifying a CPN in the CPN 
From field; a CPN From field 2816 enabling a customer 
to enter a partial or whole CPN, e.g., from 3-25 
50 numeric characters. The nMCI Interact ONM system 
matches the partial CPN and retrieves the first 10 
exchanges available in inventory; a Quantity field 
2 817 enabling a customer to enter a value, from 1 to 
2 00 per CPN group, specifying the quantity of CPNs to 
55 include in the retrieval; a Network ID field 2 818 

enabling a customer to select a specific Network ID 
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from the drop -down list by selecting the c^own arrow; a 
Range Privilege field 2 819 enabling a customer to 
select a specific Range Privilege from the drop -down 
list by selecting the down arrow; an ID Code Set field 
5 2820 enabling a customer to select a specific ID Code 
Set number from the drop -down list by selecting the 
down arrow. It should be understood that ID Code Sets 
must be defined prior to creating the CPN Order, as 
will be described herein; a Description field 2821 

10 enabling a customer to type a full or partial CPN 
description as retrieval criteria; an <Add> button 
2823 for updating the list box with the group 
information from the Country, CPN From, Quantity, 
Network ID, Range Privilege, ID Code Set and 

15 Description edit boxes; a <Remove> button 2825 

enabling a customer to remove a highlighted display 
item so that it is not included in the retrieval 
request; an <OK> button 2826 for accepting all entries 
in the Retrieve CPNs from Inventory window, and 

20 messaging the host. If nMCI Interact ONM finds one or 
more CPNS that matches specified search criteria, it 
will close the Retrieve CPNs from Inventory window. 
If the Retrieve CPNs from Inventory window is accessed 
from the CPN Order window, the results are displayed 

25 in the CPNs in Inventory section and replaces any CPNs 

that may have been in this section prior to retrieval; 
and, a <Cancel> button 2827 for closing the Retrieve 
CPNs from Inventory window without accepting any 
changes . 

30 As mentioned above, selection of the CPN 

attributes <Expand> button 2799 (Fig. 29(d)) enables a 
web page display of a Calling Party Number Attributes 
window 2830, such as shown in the example web page 
display of Figure 29 (g) . From this window, a customer 

35 may "view only" CPN attributes or features, if the 
selected CPN is located in the CPNs in Inventory 
section of the CPN order window, or, view or modify 
attributes if the selected CPN is in the CPN Updates 
section . 

40 As shown in the example web page display of 

Figure 29 (g) , a first section referred to as the CPN 
information section 2840 comprises view only fields 
presenting information such as: a three digit country 
code field 2841 which identifies the country of origin 

45 for this CPN; a "From" field 542 indicating the 

beginning number of a possible range of CPNs affected 
by this CPN Order; a "To" field 2843 indicating the 
last number of a range of numbers affected by this CPN 
Order; a Customer Account field 2844; a Division ID 

50 field 2845; a Description field 2846 describing the 
CPN(s); and, a yes or no Cellular field 2847 
indicating whether this CPN originates from a cellular 
phone. Additionally, a second section referred to as 
the CPN feature information section 2850 comprises the 

55 following field/command buttons including: a Network 
ID field 552 obtained from the drop -down list by 
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selecting the down arrow; a Range Privilege field 2853 
for selecting the Range Privilege (customized or 
universal) to be linked to this Calling Card from the 
drop -down list by selecting the down arrow; an ID Code 
5 Set field 2854 for selecting an ID Code Set to be 

associated with this CPN from the drop-down list by 
selecting the down arrow: When an ID Code Set is 
chosen, nMCI Interact ONM automatically populates the 
ID Code Length; a Supp Code Collection field 2855 

10 enabling selection from the drop down list to indicate 
when ID and/or accounting codes will be collected for 
this CPN. A tone will prompt callers to enter code(s) 
after the dialed number. Selections include: 0 - Do 
not collect Supplemental Codes; 1 - Collect 

15 Supplemental Codes for all numbers; 2 - Collect 

Supplemental Codes on all calls except 7 -digit Private 
On-Net Numbers; 3 - Collect Supplemental Codes only 
for international Off -Net numbers; 4 - Collect 
Supplemental Codes for all Off -Net numbers; a Data 

20 Indicator field 2856 enabling a user to denote data 
versus voice traffic by selecting from the drop- down 
list; a Prov Carrier 2857 indicating the provisioning 
carrier (MCI or Stentor) associated with the CPN, in 
the format of Country Code, padded to three digits 

25 with leading zeros, and the 4 -digit Carrier Code; a 
Location Type field 2858 which may be selected by 
clicking on the down arrow to activate the drop down 
list; an ID Code Length field 2859 which is 
autopopulated with a 2 -digit number according to the 

30 ID Code Set selected; an Account Code Length field 
2860; and, <Set Default>, <Use Default>, <OK> and 
<Cancel> option buttons, as described herein. 

When opening an existing Calling card order, the 
nMCI Interact ONM system Calling Card Order option 

35 allows a customer to "link" or attach network features 
to a Calling Card(s) that exist in that customer's 
inventory, i.e., Calling Cards that are active in that 
customer's database, or link network features to a new 
calling card. The following features can be 

40 defined/ linked to Calling Cards: 1) Multiple Networks; 
2) Range Privileges including Universal and 
Customized; Range Restrictions including Corporate and 
Custom; and Extended Enterprise (Location/Access 
Type) . 

45 Figure 29(h) illustrates an example web page 2870 

comprising a Calling Card order window comprising the 
following sections: 1) an order administration section 
2880 for providing administrative aspects of the 
Calling Card order such as: enabling entry of a 

50 date/time when the order is to be implemented by the 
host; selecting a priority based on the user's 
security access privilege; establishing an order 
status, e.g., approved or not approved for new orders 
in accordance with a users authorization; 2) a Cards 

55 in Inventory Section 2 89 0 used to retrieve Calling 

Cards from inventory that are not included on another 
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order. This is accomplished by selection pf the 
retrieve button 2895 and enables display of, inter 
alia, the Calling card numbers and associated PINs, a 
description assigned to the calling card, and a 
5 component count; 3) a Card updates section 2900 which 

populates the calling card order window by moving 
selected calling cards from the cards in inventory 
section or by adding new calling cards to the current 
order; and, 4) an attributes section 2910 for 

10 populating an area 2912 of the screen display with a 
list of attributes, or features, for a selected 
calling card in the inventory or updates section. 

With more particularity, the Calling Card order 
administration section 2880 of web page display 2870 

15 comprises the same field descriptions as mentioned 

herein with respect to the CPN order administration 
including: 1) a set date/time field 2882 for when the 
calling card order is to be implemented by the host; 
2) a priority field 2884 for establishing calling card 

20 order priority (depending on security access 

privileges) ; 3) a current order status field 2886; 4) 
a Remarks text field 2889 optionally used to describe 
the contents of the Calling card order; and, 5) an 
Approve field 2888 such that when checked, indicates 

25 the order is approved and transmitted to the host. 

The Calling Card inventory section 2890 used to 
retrieve a Calling Card(s) from the Calling Card 
inventory comprises the following field/command button 
descriptions: a Card Nbr-PIN field 2892 that displays 

30 the Calling Card number and associated PIN if the user 

has security access to view the PINS; a Description 
field 2894 which comprises a description assigned to 
the Calling Card, e.g., the employee or company name; 
a Component Count field 2896 indicating how many 

35 Calling Cards are within the Calling Cards Inventory 
section; a Retrieve button 2895 such that, when 
selected, retrieves a list of a customer's available 
Calling cards in inventory that are not included in 
other orders. Selection of this option enables a web 

40 page display of a Retrieve Calling Cards from 

Inventory Window 2920 such as shown in Figure 29 (i) ; 
and, a right arrow ">" command button 2898 enabling a 
customer to move single or multiple (selected) Calling 
Cards from the Calling Cards in inventory section to 

45 the Calling card Updates to include on the current 
order . 

The Calling card updates section 29 00 comprises 
the same field/command button descriptions as 
mentioned herein with respect to the CPN order 

50 administration including: a status code indication 

2901 displayed next to a Calling card having the same 
designations, i.e., no status, "A", "C" , and "D" ; a 
Card Nbr-PIN field 2902, a Description field 2903 and, 
a Component Count field 2 9 04 as described above; a 

55 left arrow "<" command button 2905 enabling a customer 

to remove a Calling card from the current order, and 
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to restore its attributes back to those th*Lt were last 
transmitted to the host, i.e., move one or more 
highlighted Calling cards to the Calling cards in 
Inventory section; an "Add" command button, e.g., only 
5 displayed for Stentor customers; and, a "Delete" 

command button. 

The Calling Card attributes section 2910 
comprises the same field/command button descriptions 
as mentioned herein with respect to the CPN order 

10 administration including: a table 2912 including an 
item field 2911 comprising those Vnet/Vision feature 
items that are listed in this column once linked to 
Calling cards, e.g., Range Privilege, Location type, 
etc.; a "Value" field 2913; a "Card Nbr" field 2914 

15 which designates the information displayed in the 

Attributes section is for the selected Calling card, 
which can be either in the Calling card In Inventory 
or Calling cards Updates sections; a <Set Dflt> button 
2915 which enables a customer to define the PC default 

20 for Calling card attributes. Once set, the PC default 
values can be applied to other Calling cards by 
selecting the <Use Dflt> button 2916 which command 
provides the option of applying either the host 
default or the user- defined PC default attributes for 

25 the selected Calling card; an <Undo> button 2917; an 
<Expand> button 2918 enabling the display of the 
Calling Card Attributes window, such as shown in 
Figure 29 (j); and a <Close> button 2919 for closing 
the Calling card Order window. 

30 As mentioned above, selection of the Calling card 

"Retrieve" button 2895 in Figure 29(h) enables a web 
page display of a Retrieve Calling cards from 
Inventory Window 29 2 0 such as shown in the example web 
page of Figure 29 (i) . From this web page, a customer 

35 may specify search criteria or retrieve a 

predetermined amount of Calling cards having defaulted 
criteria. Particularly, the Retrieve Calling cards 
from Inventory Window 29 2 0 comprises the following 
field/command button descriptions for retrieving 

40 Calling cards from customer inventory: a Card Nbr 

field 2921 enabling entry of a partial or whole 10- 
digit calling card number; a PIN field 2922 enabling 
entry of an optional 4 -digit personal identification 
number that is associated with the Calling Card number 

45 and can only be used in combination with Card Nbr; a 
Quantity field 2923 enabling a customer to enter a 
value, from 1 to 200 per Calling card group, 
specifying the quantity of Calling cards to include m 
the retrieval; a Network ID field 2924; a Range 

50 Privilege field 2925 enabling a customer to select a 
specific Range Privilege from the drop-down list by 
selecting the down arrow; a Description field 2926 
enabling a customer to type a full or partial Calling 
card description as retrieval criteria; an <Add> 

55 button 2927 for updating the list box with the group 
information from the Card Nbr, PIN, Quantity Network 
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ID, Range Privilege, and Description edit fcoxes; a 
<Remove> button 292 8 enabling a customer to remove a 
highlighted display item so that it is not included in 
the retrieval request; an <0K> button 2929 for 
5 accepting all entries in the Retrieve Calling cards 

from Inventory window, and messaging the host; and, a 
<Cancel> button 2930 foreclosing the Retrieve Calling 
cards from Inventory window without accepting any 
changes . 

10 As mentioned above, selection of the Calling card 

<Expand> button 2918 (Fig. 29(h)) from the calling 
card attributes section enables a web page display of 
a Calling card Attributes window 294 0, such as shown 
in Figure 29 (j) . From this window, a customer may 

15 "view only" calling card attributes or features, if 

the selected calling card is located in the Cards in 
Inventory section of the calling card order window, 
or, view or modify attributes if the selected calling 
card is in the Card Updates section. As shown in the 

20 web page display of Figure 29 (j), a first section 

referred to as the calling card information section _ 
2935 comprises view only fields presenting information 
such as: the Calling Card Number 29 3 6 and the 
associated PIN 2937; the Customer Account number 293 8; 

25 and the calling card description 2939 which is user- 
defined and accessible. Additionally, a second 
section referred to as the feature information section 
2941 comprises the following field/command buttons 
including: a Network ID field 2942 obtained from the 

30 drop -down list by selecting the down arrow; a Range 

Privilege field 2943 for selecting the Range Privilege 
(customized or universal) to be linked to the Calling 
Card from the drop -down list by selecting the down 
arrow; a Range Restriction field 2944 for selecting a 

35 Corporate or Custom Range Restriction to be linked to 
this Called Card from the drop- down list by selecting 
the down arrow; a Prov Carrier field 294 6 which 
indicates the provisioning carrier (MCI or Stentor) 
associated with the Calling Card, in the format of 

40 Country Code, padded to three digits with leading 

zeros, and the 4 -digit Carrier Code; a Location Type 
field 2948 for example, host default, which, once 
selected, cannot be changed until the Calling Card is 
deactivated and reinstalled; a <Set Default> button; 

45 an <Use Default> button; an <OK> command button for 
returning to the Calling Card Order window; and a 
<Cancel> button for exiting the Calling Card 
Attributes window without making changes to the 
feature information . 

50 In a similar manner as described above with 

respect to the Add New CPN web page display (Figure 
29(e)), a Stentor customer, if authorized, may add a 
new Calling Card to their inventory and assign 
attributes. The Add new Calling Card functionality 

55 includes: assigning a card number and associated 

personal identification number (PIN) , adding a 
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provisioning carrier in the format of a cquntry code, 
and, adding a Calling card description. It should be 
understood that Calling card orders may be deleted by 
selecting a delete button. 
5 When opening an existing Dialing Plan order or 

creating a new one, the jiMCI Interact ONM system 
Dialing Plan Order option allows a company to define 
their call routing Dialing Plans to meet their 
business needs and manage their network costs. Thus, 

10 the nMCI Interact Outbound NM Dialing Plan order 
enables a customer to: 1) Create 7 -digit Private 
Numbers that translate to Public Numbers, used for 
caller convenience and easy association of locations; 
2) Force Public Numbers On-Net so that it is no longer 

15 routed according to Public Network rules, but rather 
by the customer's dialing plan; 3) Exclude a specific 
number, or range of Public Numbers, to control network 
abuse; assign specific numbers to terminate to 
Customized Message Announcements to provide 

20 user-defined information lines; and, establish 

"Hotlines" to enhance customer service by providing 
caller convenience and local presence. 

Within a dialing plan order, a user may specify 
the origination, or dialed digit range (the number 

25 dialed) , and the termination data (where or how the 
call is answered, e.g., terminating to Dedicated 
Access Lines (DALs) . 

Figure 29 (k) illustrates an example web page 
comprising a Dialing Plan order window 2950 comprising 

30 the following sections: 1) an order administration 

section 2960 for providing administrative aspects of 
the Dialing Plan order such as: enabling entry of a 
date/time when the order is to be implemented by the 
host; selecting a priority based on the user's 

35 security access privilege; establishing an order 

status, e.g., approved or not approved for new orders 
in accordance with a users authorization; 2) a Dialing 
Plans in inventory section 2970 used to retrieve 
Dialing Plans from inventory that are not included on 

40 another order. This is accomplished by selection of 
the retrieve button 2975 and enables display of the 
country codes associated with the Dialing Plan; 
display of the dial plan single number or beginning 
number within a range; a termination type for the 

45 dialing plan; and, a component count indicating the 

amount of dialing plans that are in the inventory 
section; 3) a Dialing Plan updates section 2980 for 
populating the dialing plan order window by moving 
selected dialing plans from the Dialing Plan inventory 

50 section or by adding new dialing plans to the current 
order; and, 4) an attributes section 2990 for 
populating an area of screen display 2950 with a list 
of attributes, or features, for a selected dialing 
plan in the inventory or updates section. 

55 With more particularity, the Dialing Plan order 

administration section 2960 of example web page 
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display 2950 comprises the same field descriptions as 
mentioned herein with respect to the CPN order 
administration including: 1) a set date/time field 
2961 for when the dialing plan order is to be 
5 implemented by the host; 2) a priority field 2962 for 
establishing dialing plan order priority (depending on 
security access privileges) ; 3) a current order status 
field 2963; 4) a Remarks text field 2964 optionally 
used to describe the contents of the Dialing Plan 

10 order; and, 5) an Approve field 2965 such that when 
checked, indicates the order is approved and 
transmitted to the host. 

The Dialing Plans in Inventory section 2970 used 
to retrieve Dialing Plan(s) from the Dialing Plan 

15 inventory comprises the following field/command button 

descriptions: a Ctry field 2971 that displays the 
Dialing Plan's country code; a Dial Plan Beginning 
field 2972 indicating the remaining digits of the 
Dialing Plan number of beginning number within a 

20 range; a type field 2973 indicating the termination 
type for the dialing plan; a Component Count field 

2974 indicating how many Dialing Plans are within the 
Calling Cards Inventory section; a Retrieve button 

2975 such that, when selected, retrieves a list of a 
25 customer's available Dialing Plans in inventory that 

are not included in other orders. Selection of this 
option will enable a web page display having a 
Retrieve Dialing Plans from Inventory Window 3000 such 
as shown in Figure 29(1); and, a right arrow ">" 

30 command button 676 enabling a customer to move single 
or multiple (selected) Dialing Plans from the Dialing 
Plans in inventory section to the Dialing Plan Updates 
to include on the current order. 

The Dialing Plan updates section 29 80 comprises 

35 the same field/command button descriptions as 

mentioned herein with respect to the CPN updates 
section including: a status code indication 2981 
displayed next to a Dialing Plan having the same 
designations, i.e., no status, "A" (added), "C" 

40 (changed), and "D" (deleted); a Ctry field 2982, a 

Dial Plan Beginning field 2983, a termination "type" 
field 2984, and, a Component Count field 2985 as 
described above; a left arrow "<" command button 29 86 
enabling a customer to remove a Dialing Plan from the 

45 current order, and to restore its attributes back to 
those that were last transmitted to the host, i.e., 
move one or more highlighted Dialing Plans to the 
Dialing Plans in Inventory section; an "Add" command 
button enabling entry of new Dialing Plan record (s) ; 

50 and, a "Delete" command button for deleting Dialing 
Plan records. 

The Dialing Plan attributes section 2990 
comprises the same field/command button descriptions 
as mentioned herein with respect to the CPN attributes 

55 section including: an "Item" field 2992, e.g., Network 

ID; a "Value" field 2994; a "Dial Nbr" field 2996 
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which designates the information displayed, in the 
Attributes section is for the selected Dialing Plan, 
which can be either in the Dialing Plans In Inventory 
or Dialing Plan Updates sections; an <Undo> button 
5 2997; an <Expand> button 29 9 8 enabling the display of 

the Dialing Plan Attributes window, such as shown in 
Figure 29 (m) ; and a <Clo"Se> button 2999 for closing 
the Dialing Plan Order window. 

As mentioned above, selection of the Dialing Plan 

10 "Retrieve" button 2975 in Figure 29 (k) enables a web 
page display of a Retrieve Dialing Plans from 
Inventory Window 3 000 such as shown in the example web 
page of Figure 29(1). From this display, a customer 
may specify search criteria or retrieve a 

15 predetermined amount of Dialing Plans having defaulted 
criteria. Particularly, the Retrieve Dialing Plans 
from Inventory Window 3000 comprises the following 
field/command button descriptions for retrieving 
Dialing Plans from customer inventory: an 

20 International Direct Dialed Digits "IDDD" radio button 
3001 enabling entry of dialed digits as a public 
number in a dialed digits field 3003. When IDDD is 
selected, the user is required to designate a Country 
Code in a Country field 3002; a Private radio button 

25 3005 enabling entry of a Private Number in the Dialed 
Digits field when selected. The Country field is 
protected when this type of dialed digits is selected; 
a Country field 3002 that must be selected from the 
drop- down list when IDDD is selected as the type of 

30 dialed digits; a dialed digits field 3003 

enabling entry of a partial or whole number (dialed 
digits) not including the Country Code) ; a Quantity 
field 3004 enabling a customer to enter a value, from 
1 to 100, specifying the quantity of Dialing Plans to 

35 include in the retrieval; a Network ID field 3 006; a 
Termination/Location ID field 3008 indicating the 
Location ID of a DAL which can be selected from the 
drop-down list (if available within the customer's 
network) ; an <Add> button for updating the list box in 

40 the selected dialing plans section with the group 

information from the IDDD, Private, Country (only when 
IDDD is selected) , Dialed Digits, Quantity, Network ID 
and Termination Location ID edit boxes, where 
applicable; a <Remove> button enabling a customer to 

45 remove a highlighted display item so that it is not 

included in the retrieval request; an <OK> button for 
accepting all entries in the Retrieve Dialing Plans 
from Inventory window, and messaging the host; and, a 
<Cancel> button for closing the Retrieve Dialing Plans 

50 from Inventory window without accepting any changes. 

As mentioned above, selection of the Dialing Plan 
<Expand> button 2998 from the Dialing Plan attributes 
section enables a web page display of a Dialing Plan 
Attributes window 3 020, such as the example web page 

55 display shown in Figure 29 (m) . From this display, a 

customer may view Dialing plan attributes or features, 



WO 99/15979 



PCT/US98/20170 



-101- 



if the selected dialing plan is located in, the Dialing 
Plans in Inventory section of the Dialing Plans Order 
window, or, view or modify attributes if the selected 
calling card is in the Dialing Plan Updates section. 
5 As shown in the web page display of Figure 29 (m) , 

a first section referred^ to as the Dialed Digit Range 
section 3022 comprises fields /command buttons enabling 
a customer to define the origination data (number 
dialed) for a dialing plan. The field/command buttons 

10 include: "type" radio buttons 3025 enabling the 
selection of the originating number as a private 
number or public number (IDDD) ; a country field 3026 
for enabling entry of a country code from a drop-down 
list when IDDD is selected as the dialed digit type; a 

15 network ID field 3027 enabling entry of a network in 

which a new Dialing plan is defined; a "From" field 
3 02 8 enabling entry of a beginning number of a range 
of numbers; a "To" field 3029 enabling entry of a last 
number of a range of numbers; a Carrier ID field 3023 

20 which is an optional entry for numbers defined in the 
Dialing Plan order that are only completed by the DAP 
if originated by the specified Carrier Code within 
that originating country, and, that are only entered 
when a Country and Carrier Code is specified. 

25 As shown in the example web page display of 

Figure 29 (m) , a second section referred to as the 
Termination section 3030 comprises fields/command 
buttons enabling a customer to define the termination 
data for a dialing plan. The field/command buttons 

30 include: location name field 3031 which is an 

alphanumeric field enabling entry of a description of 
the termination, e.g., company name or location; a 
type field 3032 enabling selection from a drop-down 
list of the following termination types to which the 

35 Private or Public Number sends the call: a DAL - used 
for Dedicated Access Lines, an IDDD - used for all 
Public Numbers, a CMA - used for Customized Message 
Announcements, and, a EXCL - used to exclude a number 
or range of numbers; a Location ID field 3033 of a 

40 Dedicated Access Line (DAL) which can be entered 

(e.g., Shared DALs) or selected from the drop-down 
list. If the termination type is "DAL," a 
section/entry is required; a Country field 3034 for 
selection of the Country Code (where call will 

45 terminate) from the values in the drop- down list and 

is required entry when "IDDD" is the termination type; 
a Prefix Digits field 3035 for entering the numbers # at 
the beginning of the terminating number (not including 
the Country Code) which are the same for all numbers 

50 in a range, or the entire terminating number when 
entering individual numbers; a Reuse Digit Length 
field 3 036 enabling entry of the number of digits from 
the dialed digits that will be reused in the 
terminating number when used in a range with Prefix 

55 Digits. This field displays the default value, e.g., 
"00", and is protected when terminating numbers are 
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entered individually or when the terminatipn type is 
CMA or EXCL. When a value is required, it can either 
be typed in or selected from the drop -down list; a 
Nature of Subsequent Address field 3037 enabling entry 
5 of the out pulse digits delivered to a customer's 

equipment (CPE) . When the termination type is a DAL, 
the default is changed from "None" to any of the other 
selections. However, "Subscriber 7 ' is typically 
selected, as "National" and "International" would only 
10 be used by a private network owner; a Point of Origin 
Routing Indicator check box 3038 to indicate Point of 
Origin Routing which enables a customer to designate 
an alternate DAL , that overrides the DAL specified in 
that customer's Dialing Plan, based on the originating 
15 switch. This helps to manage load balancing for DALS, 

e.g. for Vnet; and, an <0K> button and a <Cancel> 
button for closing the Dialing Plan Attributes window 
without making changes to the feature information. 
When opening an existing ID Code/Set order or 
20 creating a new one, the nMCI Interact ONM system ID 
Code/Set Order option allows a customer to define a 
unique 1 - 11 digit number ID Code and assign that 
number to an individual. ID Codes preferably have a 
range privilege assigned to them, therefore, a 
25 customer can tailor calling privileges and assign them 
to individuals via their ID Code. Once an ID Code 
system is established, the code is entered after the 
dialed number on every call made. It should be noted 
that the network DAP switches (Figure 28) verifies ID 
30 Codes. Thus, a correct ID Code must be entered or the 
MCI switch will not complete the call. In the 
preferred embodiment, there are two types of ID Code 
Set Orders in nMCI Interact Outbound NM: 1) Add/Change 
ID Code Set Order; and 2) Delete ID Code Set Order. 
35 in the preferred embodiment, the Add/Change ID 

Code Set Order enables a customer to perform the 
following functions to implement ID Codes within that 
customer's Vnet/Vision Network: 1) Define ID Code 
Length (1-11 digits) ; 2) Assign Range Privileges to 
40 ID Codes; 3) Define Local Sets; 4) Generate ID Codes 
Sequentially or Randomly to an ID Code Set; 5) 
Individual Entry of ID Codes; and 6) Modify/Delete ID 
Codes within a Set. 

Figure 29 (n) illustrates an example web page 3050 
45 comprising an Add/Change ID Code Set Order Window 
comprising the following sections: 1) an order 
administration section 3051 for providing 
administrative aspects of the order such as: enabling 
entry of a date/ time when the order is to be 
50 implemented by the host; selecting a priority based on 

the user's security access privilege; establishing an 
order status, e.g., approved or not approved for new 
orders in accordance with a users authorization; 2) 
an ID Code Sets in Inventory section 3060 used to 
55 retrieve ID Code Sets from inventory that are not 

included on another order. This is accomplished by 
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selection of the retrieve button 3065 and enables 
display of the ID Code Set details including: ID Code, 
Set ID, set types, defined ID Code length; a 
description of the ID Code Set, e.g., by location; 
5 and, a component count indicating the amount of ID 

Code Sets in the ID Code/Sets inventory section; 3) an 
ID Code Set Updates Section 3 07 0 for populating the ID 
Code/Set order window by moving selected ID Code/Sets 
from the ID Code/Set inventory section or by adding 
10 new ID Code/Set to the current order; and, 4) an 
attributes section 3080 for populating an area of 
screen display with a list of attributes, or features, 
for a selected ID Code/Set in the inventory or updates 
section . 

15 With more particularity, the ID Code Set Order 

administration section 3051 of web page display 3050 
comprises the same field descriptions as mentioned 
herein with respect to the Dialing Plan order 
administration including: 1) a set date/time field 

20 3052 for when the ID Code/Set order is to be 

implemented by the host; 2) a priority field 3053 for 
establishing dialing plan order priority (depending on 
security access privileges) ; 3) a current order status 
field 3054; 4) a Remarks text field 3055 optionally 

25 used to describe the contents of the ID Code/Set 

order; and, 5) an Approve field 3056 such that when 
checked, indicates the order is approved and 
transmitted to the host. 

The ID Code/Sets in inventory section 3060 used 

30 to retrieve ID Code/Set (s) from the ID Code/Sets 

inventory comprises the following field/command button 
descriptions: a Set field 3061 indicating the ID 
Code/Set; a "type" field 762 having an indication of a 
local ("L") set or a global ( "G" ) set; a Len field 

35 3 0 63 indicating the defined length of the ID Code; a 

description field 3064 indicating the description of 
the ID Code Set, e.g., location; a Component Count 
field 3066 indicating how many ID Code Sets are within 
the ID Code Sets in Inventory section; a Retrieve 

40 button 3065 such that, when selected, retrieves a list 
of a customer's available ID Code Sets in inventory 
that are not included in other orders. Selection of 
this option will enable a web page display having a 
Retrieve ID Code Sets from Inventory Window 3 09 0 such 

45 as shown in Figure 29 (o) ; and, a right arrow ">" 

command button 3067 enabling a customer to move single 
or multiple (selected) ID Code Sets from the ID Code 
Sets in inventory section to the ID Code Set Updates 
to include on the current order. 

50 The ID Code Sets updates section 3070 comprises 

the above -described Set, "type," Len, description and 
component count fields and, a left arrow "<" command 
button 3 068 enabling a customer to move one or more 
highlighted ID Code Sets to the ID Code Sets in 

55 Inventory section; a "Delete" command button; and, an 

"Add" command button 3 069 enabling the addition of new 
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ID Code Sets to the order including f unct ipnality 
enabling the creation of an ID Code Set which can be 
added to an order and which must contain at least one 
ID Code prior to approving the order. Adding a new 
5 Set to the order entails specification of either a 
local or global ID Codes sets. 

The ID Code Sets attributes section 3080 
comprises the same field/command button descriptions 
as mentioned herein with respect to the Dialing Plan 

10 attributes section including: an "Item" field 3082, 

e.g., including ID Code Set and ID Code Information; a 
"Value" field 3083; a "Set" field 3084 which 
designates the information displayed in the Attributes 
section is for the selected ID Code Set, which can be 

15 either in the ID Code Sets In Inventory or ID Code Set 

Updates sections; an <Undo> button 3 085; a <Del Code> 
button 3086 for deleting a selected ID Code; an <Add 
Code> button 3087 enabling display of a further Web 
page including an Add ID Codes to Set window, such as 

20 shown in Figure 29 (p) ; and a <Close> button 3088 for 
closing the Add/Change ID Code Set Order window. 

As mentioned above, selection of the ID Code Sets 
"Retrieve" button 3065 in Figure 29 (n) enables a web 
page display of a Retrieve ID Code Sets from Inventory 

25 Window 3 09 0 such as shown in the example web page 

display of Figure 29 (o) . From this window, a customer 
may specify search criteria or retrieve a 
predetermined amount of ID Code Sets having defaulted 
criteria. Particularly, the Retrieve ID Code Sets from 

30 Inventory Window 3090 comprises the following fields 

for retrieving ID Code Sets from customer inventory: a 
Set field 3091 enabling entry of the Set number; a 
description field 3092 enabling entry of a full or 
partial ID Code Set description, e.g., alphanumeric 

35 description; an ID Code field 3093 enabling entry of a 
specific ID Code; a Quantity field 3094 enabling a 
customer to enter a value specifying the quantity of 
ID Code Sets to include in the retrieval; an <Add> 
button 3095 for updating the list box in the selected 

40 dialing plans section with the group information from 
the Set, Description, ID Code, and Quantity text 
boxes; a <Remove> button 3 09 6 enabling a customer to 
remove a highlighted display item so that it is not 
included in the retrieval request; an <OK> button 3 09 7 

45 for accepting all entries in the Retrieve ID Code Sets 
from Inventory window, and messaging the host; and, a 
<Cancel> button 3098 for closing the Retrieve ID Code 
Sets from Inventory window without accepting any 
changes . 

50 As mentioned above, selection of the Add Code 

button 3087 in Figure 29 (n) , enables display of the 
Add ID Codes to Set window such as shown in the 
example Add ID Codes to Set web page 310 0 of Figure 
29 (p) . As shown in Figure 29 (p) , the Add ID Codes to 

55 Set window 3100 enables the customer to delete ID 

codes from a set; add ID codes one at a time, e.g., 
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single generation; sequentially generate ip Codes to 
the Set; and randomly generate ID Codes to the Set. 
For instance, the customer may enter the set 
information in the following fields: the Set field 
5 3102 for which the ID Code changes will take effect; a 

length field 3104 setting forth the length of the ID 
Codes contained in the set; a description field 
enabling entry of text describing the set; and a type 
field indicating the set as local or global. With 

10 regard to the ID Codes generate options, a single 

generate option 3110 enables a user to add ID Codes 
one at a time to a set, e.g. by entering the number in 
the ID Code field 3112; a sequential generate option 
3114 enables the user to specify a beginning ID Code 

15 number and a Quantity in entry fields (not shown) . 

The nMCI Interact ONM will automatically generate 
sequential ID codes according to the quantity 
specified by selecting the Add button 3118 which 
updates a list box 3125 with information from the 

20 generated id Codes; and, a random generate option 312 0 
enables the user to specify a beginning ID Code 
number, an ending ID Code number, and, a Quantity in 
entry fields (not shown) . The nMCI Interact ONM will 
randomly- generate the specified number of ID codes 

25 within the beginning and ending range by selecting the 
Add button 3118 to update list box 3125. Selection of 
the <OK> button 3126 will enable acceptance of all the 
newly generated ID Code entries, messaging the host of 
the new codes, and, returning control to the 

30 Add/Change ID Code Set order page (Figure 29 (n) ) . 

As mentioned above with respect to Figure 29 (a) 
depicting the nMCI Interact ONM web page display 2764, 
the control menu option 2720 provides a refresh option 
which enables an update of all internal lists that 

35 have been altered on the host NetCap system. 

Specifically, the nMCI Interact ONM system 2700 
updates the following lists: the network ID, Range 
Privilege, ID Code Set, Billing Location ID, Customer 
Service ID, location/access type, and, provisioning 

40 carrier. It should be understood that Refresh option 

will not change the values of an open window that 
includes data from one of the lists. 

Furthermore, with respect to the report menu 
option 2742 provided in the main web page display of 

45 Figure 29 (a) , users are enabled to inquire on their 

respective inventory for CPNs, Calling Cards, Dialing 
Plans, and ID Code Sets. The ONM system will display 
a respective "Retrieve" item from inventory, e.g., 
selection of report option for CPNs enables the 

50 display of the Retrieve CPNs from inventory screen as 
shown in Fig. 29(f) . Particularly, in the ONM system 
2700, four inventory reports may be provided to 
customers: CPN, Calling Card, Dialing Plan, and ID 
Code Set. Reports may be requested from the screen 

55 display of Figure 29(a), however, will be delivered to 
the nMCI Interact Inbox message center 27 0, for client 
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viewing and retrieval in the manner as despribed 
herein . 
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EVENT MONITOR 

As mentioned above, another application of the 
suite of telecommunications network management 
applications is the Broadband reporting system 850. 
5 As shown in the high level process flow diagram of 

Figure 30 customers are enabled to request, specify, 
schedule and receive data reports relating to their 
Broadband, e.g., packet - switched, data networks. 
As shown in Figure 30, the Broadband ( "BB" ) 

10 reporting system includes a Broadband view client 
comprising the client workstation component 20 
employing a web browser running, for example, Internet 
Explorer® 4.0 or greater, for enabling the generation 
of requests and receipt of responses from the 

15 Broadband system processes over the Web/Internet via a 
secure socket connection. As described herein, the 
StarWRS component 2 00 of the nMCI Interact system may 
be implemented to support Broadband report request, 
report retrieval, and alarm monitoring functions. All 

20 interactions with the Broadband reporting and system 

network management platform ("SNMP") features occur 
between the Broadband client applet 852 and a 
Broadband server 860. Particularly, Broadband 
application's Java classes invoke a "message class" 

25 that has the Common Object code as an interface 
definition . 

Integrated within the Broadband reporting system 
architecture 850 of Figure 30 is the nMCI Interact Web 
Server 24 and Dispatcher components 26 which provides 

30 for the transport between the BB client browser and a 

Broadband proxy interface including all authentication 
and encryption. Thus, secure communication from the 
customer browser to a DMZ Web server is enabled over a 
first secure TCP/IP socket connection, such as SSL, 

35 and, communication from the DMZ Web server over a 

corporate firewall to the Dispatcher server is enabled 
over a second TCP/IP socket connection, such as DES. 
These secure paths enable customer requests t and server 
responses to be communicated between the client 

40 browser and the Broadband server 860. Specifically, 
the Dispatcher server 26 includes an integrated 
Broadband proxy application to forward user requests 
and responses to/from the Broadband server process 860 
and to enable the Broadband functionality. As 

45 described herein, this proxy capability includes a 

multi- thread engine enabling multiple, simultaneously 
executing sessions supporting anticipated user load. 
The interface between the Dispatcher server and the 
Broadband proxy process is also message -based 

50 employing, e.g., TCP/IP socket transport, and, as will 
be described, a messaging protocol is defined that 
comprises a generic message header followed by proxy- 
specific data. For messages sent to the Broadband 
server, the generic message header is first sent 

55 followed by the proxy specific data. In the other 
direction, the same process is employed, i.e., the 
Broadband proxy sends the generic header followed by 
the proxy- specif ic response back to the dispatch 
server for communication over the firewall and back to 

60 the Web server. 
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In the embodiment shown in Figure 30, , all 
Broadband responses including CSV data files are 
forwarded through the Dispatcher server 26 and 
intervening DMZ Web server 24 to the Broadband Inbox 
5 messaging server for subsequent access and eventual 
display at the client. 

In the preferred embodiment; the Broadband ("BB") 
server 860 performs the various database queries and 
function calls in response to requests received from 

10 the customer via the Broadband proxy 854. That is, the 

BB Client submits all requests and queries to the BB 
Server 86 0 using a generic proxy framework called 
BBProxyServer 854. These communications include 
Report requests, retrieval and viewing; requests for 

15 circuit information using SNMP Get commands; 

assignments of mnemonics for circuit names using SNMP 
Set commands; and, establishing a session to monitor 
alarm activities on circuits. Particularly, the 
Broadband server 860 is responsible for all tasks 

20 leading up to and including the generation of 

performance report and SNMP information including data 
collection, calculation, storage, and report 
generation . 

As further shown in Figure 30, the components 

25 feeding information to the Broadband server 860 

include: 1) a Performance Reporting System ( "PRS" ) 
server 880 for sending performance and statistical 
data to the Broadband server; and, 2) the SNMP 
platform 87 0 which is a tool that feeds real- or near 

30 real-time SNMP alarm and network event data to the 

Broadband Web server 860 via proxy interface 871. One 
such SNMP tool implemented by the assignee of the 
present invention is entitled "NetExpert" . The 
Broadband server 860 additionally supports SNMP 

35 "get/set" functionality which is a menu-driven 

facility enabling a user to guery the SNMP database 
for the value of a variable in a Management 
Information Base ( "MIB" ) 887, or, to set the value of 
certain variables in the MIB, as will be described m 

40 further detail hereinafter. 

The Broadband server 860 additionally supports 
communication with the StarOE component 3 9 which 
provides order entry functions including functionality 
necessary to manage (create, update, delete) Broadband 

45 users and, allows for a feed of the appropriate 
information to the Broadband server in order to 
associate the appropriate reports and Broadband 
functionality to the right customer once given 
admission to the Broadband service. As described, the 

50 StarOE order entry process essentially provides the 

means for authenticating users, and, initiating report 
generation. A messaging interface is provided between 
StarOE to the Broadband Web Server 860 functioning as 
a client to receive authentication information and 

55 Bill ID and Level of service information which are 
supplied in response to launch of the Broadband 
applet. 

To establish Basic level reporting, the Broadband 
Server 860 transmits new customer information to the 
60 PRS1 component 880 when it is received. The customer 
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Bill ID and circuit information are entered into the 
PRS1 tables via messaging interface 884. Any 
additions to or updates of User Name, User ID, Bill 
IDs are periodically passed from the Broadband Server 
5 860 to the PRS1 880 via FTP messaging interface 883 m 
response to the periodic, e.g., nightly, updates to 
the Broadband server from StarOE. Particularly, the 
Broadband server 860 receives from the StarOE server 
39 a file containing all current BB customers with the 

10 following information: a date/ time stamp; a username; 

a userid; a service level indicator; and, the number 
of billing ids and bill ids. For the level of service 
indicator, Broadband offers the following options: 1) 
Basic; 2) Standard; 3) Enhanced SNMP; 4) Premium; 5) 

15 Enhanced Ad hoc Reporting; 6) Enhanced SNMP + Ad hoc 
Reporting; and 7) Dedicated SNMP. Specifically, from 
the information downloaded from StarOE, comma 
separated value (CSV) reports are automatically 
created on a daily basis by the PRS1 from the 

20 inception of service until service is discontinued. 
As an example, for the Basic level of service, the 
Broadband Server delivers three (3) CSV Files to 
StarWRS Inbox 270: Configuration report, Circuit 
usage, and PVC usage. 

25 Referring to Figure 31, the PRS device 880 

performs the following: 1) queries the MIB 887 on each 
switch via interface 886 for information about that 
circuit; 2) collects the data; and, 3) assembles that 
data in the appropriate tables for storage in the 

30 Broadband Server database 885. A nightly process 

between the RMS 87 2 and PRS database 2 80 synchs up PRS 
level of service information with the RMS 270 to 
determine what level of reporting is assigned to each 
circuit/PVC and runs the appropriate reports. From 

35 these components, the following functions, reports and 
capabilities are available to nMCI Interact users: a) 
near real-time performance statistics; b) customer 
performance reports including: 1) Frame Relay Graphs 
including: Network Health (Daily-Monthly); Network 

40 Throughput (Daily-Weekly-Monthly) ; Busy Hour Circuit 
Trend (Daily- Weekly -Monthly) ; Customer Frame Delivery 
(Daily-Weekly-Monthly); PVC Utilization by Access < 
Circuit Busy Hour (Daily- Weekly -Monthly ) ; and Quality 
of Access Port by Hour (Daily) ; 2) Frame Relay Text 

45 Reports including: Network Throughput (Daily -Weekly- 
Monthly) ; Busy Hour Circuit Trend (Daily -Weekly- 
Monthly) ; Customer Frame Delivery (Daily -Weekly- 
Monthly) ; PVC Utilization by Access Circuit Busy Hour 
(Daily-Weekly-Monthly) ; Quality of Access Port by Hour 

50 (Daily) ; and, Customer Configuration (Daily) ; 3) Frame 

Relay Downloads including: Circuit Usage (Daily) and 
PVC Usage (Daily) ; and 4) SMDS Graphs including 
Circuit Statistics (Daily -Weekly-Monthly ) and Busy 
Hour Circuit Trend (Daily -Weekly-Monthly) . Additional 

55 capabilities include providing Near Real-time alarms 

and configuration reports (Frame and SMDS) relating to 
an MCI customer's virtual transport network. Thus, 
the Broadband system 20 0 of the invention provides a 
tool set by which a customer can understand the 
60 performance of their virtual data network. It provides 
the customer with the ability to trend network 
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performance statistics over time, and then, to 
determine whether the network should be changed to 
ensure that it is operating at maximum performance 
levels (i.e., meeting business needs). The Broadband 
5 reporting system thus enables customers to review 

network performance data over a period of time, e.g., 
up to 45 days, by creating and saving reports on their 
workstation, a network server, or a floppy disk. 
Alarm trending and analysis, correlating alarm 
10 occurrences to network availability, network 

performance and problem resolution may also be 
performed. 

A detailed flow diagram illustrating the CSV 
report creation process is now illustrated in view of 
15 Figures 30, 31, 32(a) and 32(b). As shown in Figure 
32(a), steps 902-906 depict the addition of the User 
Bill ID to PRS1, the addition of a customer's level of 
service information to StarOE and, addition of any 
report suppression information to the RMS. As 
20 described, level of Service information is available 
from the StarOE system. Level of service information 
from StarOE is of a courser granularity and is used to 
enable access to the appropriate Broadband 
capabilities, based on the order entry process. A 
25 user can suppress the transmission of a report or set 
of reports using the BB application, however, this 
does not stop the collection of performance 
statistics, only the generation of reports. 

The next few steps 908-914 relate to the data 
30 collection process. Specifically, data on the 
performance of all circuits associated with a 
particular Bill ID is collected from all switches m 
the ATM or Frame Relay Network by an automated 
periodic polling process, e.g., hourly. The addition 
35 of a new Bill ID to the PRS1 tables (step 902) is 

utilized by the polling process which process adds 
circuits and PVC to its polling requests based on 
association with the new Bill ID, as indicated at step 
908. Then, as indicated at step 910, the poller 
40 queries the MIB 887 on each switch in the network t for 
statistics on selected circuits and PVC on a cyclical 
basis, e.g., every 15 minutes. As shown in Figure 31, 
the PRS poller function 896 polls the MIB 887 at each 
switch 888 in the network, e.g., Frame Relay or ATM 
45 network, in sequence. The Poller sends a UDP packet 
to the MIB on each switch in sequence for statistics 
on all circuits/PVCs enabled for Broadband service. 
In response to the UDP request, at step 912, the MIB 
returns all the current statistics on circuit/PVC data 
50 from the switch. In the event that a switch is not 

reachable, the polling process logs an error in a PRS1 
error log indicating that the specific switch was not 
reachable. Next, as indicated at step 914, the PRS1 
writes the data to a text file and a Sybase bulk 
55 loader process adds the information to a raw data 

table. Particularly, as shown in Figure 31, a PRS 
assembler process 897 distributes statistics to the 
appropriate tables in a PRS1 active database 880. The 
assembler process compares the previous hour's data to 
60 the data in the raw table, compares values and writes 
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the deltas to the hourly tables, which tables are then 
replicated to the reporter. 

Then, in Figure 32(a) at step 916, an automated 
process runs selected reports on available statistics 
S in the PRS database tables. In the preferred 

embodiment, as shown in Figure 31, this reporting 
process 29 8 occurs nightly, however, it can be run on 
any periodic basis. The specific reports that are run 
are determined by the level of service for which the 

10 Bill ID is enrolled as stored in StarOE tables. 

Referring to Figure 32(b), as indicated at step 
922, for each Bill ID, the reporter determines which 
reports are to be produced, generates queries against 
the appropriate tables, runs the queries at the 

15 appropriate time and delivers reports to the users BB 
Inbox 27 0. Report creation is done in sequence: all 
dailies, then all weeklies (if appropriate) then all 
monthlies (as appropriate) . Particularly, as 
indicated at steps 925 and 927, a control process 

20 "s_RunA 11 Reports" is invoked to load all customer 

lists, and at step 925 calls "s_GenReport" which 
collects level of service information for all 
customers. As indicated at step 928, the RMS process 
returns level of service information indicating any 

25 report suppression, and, at steps 929, the 

"s__GenReport" creates and executes queries against the 
data collected in the PRS1 database. At step 930, 
result sets are written to a temporary report 
directory and are then compressed at step 933 and 

30 added to the PRS database which may store the report 
for a predetermined amount of time, e.g., one week. 
Next, as indicated at step 935, the reports are 
replicated using off-the-shelf components, e.g., 
Sybases's RepServer, and saved on a Broadband server 

35 report location database ( "RLD" ) 88 5 which can be 

remote mounted by the Broadband Server 860. 
Particularly, the PRS reporter 29 8 shares a drive on 
which these reports are located with the Broadband 
Server via a remote file mount. The Broadband Server 

40 database retains data and reports for a predetermined 
period of time, e.g., 4 5 days, prior to the current 
data . 

Finally, as indicated at step 938, the Broadband 
Server 86 0 determines which reports have been produced 

45 and forwards them directly to of with the Broadband 
Inbox component associated with the Bill ID. 

Broadband Server creates a unique filename for each 
CSV report and places each report on the Broadband 
Inbox 270 (Figure 30) for customer retrieval, as 

50 indicated at step 940. The steps of 922-938 are 

depicted in a condensed physical architecture diagram 
of the Broadband system shown in Figure 31. 

As shown in Figure 32(b) at steps 925-927, 933- 
935 a determination is made as to whether the 

55 processing performed in each step was successful. If 
the processing performed in each step was not 
successful, or, an error occurs, then the error may be 
logged in a log file 9 39 at the Broadband Server and 
at Inbox for subsequent review, when necessary. 
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Details of the Broadband -report retrieval process 
950 is now described in view of Figure 33. It is 
assumed that StarOE has already validated the user's 
id and password, and that the user is entitled to 
5 receive Broadband services. Thus, upon selection of 
the Broadband Services icon 93 from the nMCI Interact 
home page (Figure 5(b)) the user may enter into the 
Broadband Services system and particularly, to access 
the Broadband Client front end. A client Broadband 

10 applet is thus, downloaded to the customer who is 

presented with the Broadband main display screen, as 
indicated at step 952. 

An exemplary Broadband web -page BB Main Display 
screen 1720 is shown in Figure 34 (a) which presents a 

15 variety of user - selectable Broadband options 

including: 1) an Inbox option 1722 enabling a user to 
retrieve their Broadband reports; 2) an option 1724 
enabling a user to view SNMP alarms; 3) an option 172 6 
enabling a user to specify reports to be suppressed; 

20 4) an option 1728 enabling a user to retrieve 

Broadband reports that have been archived; 5) an 
option 1730 enabling a user to receive information 
regarding their circuit locations; 6) an option 1732 
enabling the "get/set" functionality for providing 

25 meaningful labels to circuit locations to improve 

report readability; and, 7) an option 1734 enabling 
the retrieval of a map viewer application for 
generating maps portraying the customer's virtual 
networks . 

30 In the preferred embodiment, a Broadband Main 

Display applet is provided as a launching pad for 
accessing all of the aforementioned Broadband 
services. The Main Display applet is preferably a 
Java applet running inside the user web browser 20 and 

35 utilizing classes which extend the basic Java applet 

functionality in areas such as application management, 
user session management, user- interface, inter -applet 
communication, and client/server communications. 
Particularly, from the Broadband Main Display applet 

40 access to and communications between Broadband 

applications is provided using the Common Object 
COApplet, COApp, and COBackPlane services which are. 
objects functioning in the manner as described t herein . 
In the manner as shown in Figure 3, the Main Display 

45 applet BBMainDisplay inherits from COAppIMPL class 
with a COApplet interface and is launched from the 
nMCI Interact COBackPlane using the COApplet 
interface. When a user clicks on a Broadband service 
toolbar button or menu item, BBMainDisplay creates an 

50 instance of a COApp (let) to manage the corresponding 

application. When the user exits from Broadband 
services, the COBackPlane is utilized to destroy the 
application and its windows. 

The Broadband Main Display applet provides a 

55 menu-bar, toolbar, and status bar for accessing 
Broadband services according to the customer's 
subscribed service option which includes: Basic- 
Standard; Enhanced SNMP; Premium; Enhanced Ad hoc 
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Reporting; Enhanced SNMP + Ad -hoc Reporting; and 
Dedicated SNMP. As determined by the user logon 
session with the StarOE server 260, if the user is not 
entitled or does not have authorization for a 
5 particular service, the corresponding toolbar icon or 
menu item is disabled (ghosted-out ) and will be 
rendered insensitive to user input in accordance with 
the customer service option. 

When BBMainDisplay is launched, the Main Display 

10 first determines the user's Broadband level of service 

option, e.g., Basic, Standard, Enhanced SNMP, etc. A 
user selects a Broadband service, e.g., custom 
reporting, archive reporting, or SNMP features such as 
Get/Set and alarm panel by clicking on the 

15 corresponding toolbar icon or pull -down menu item on 
the Main Display applet (Figure 34(a)). For the case 
of custom (Ad hoc) reporting of data, e.g., from the 
Frame Relay MIB, a custom reporting applet interface 
is provided. From this web interface, a customer can 

20 select from the available data variables (i.e. 

physical or logical circuit, data point value, time 
frame for report, etc.). Specific responsibilities of 
the custom report applet include: 1) allowing 
customers to define a custom report query using single 

25 performance statistics category, statistics range, and 

date/ time range; 2) allowing customers to select 
reports presenting statistics relating to their 
current network Access Circuits or network PVCs . This 
comprises enabling a customer to select either Access 

30 Circuit or PVC reporting category type, in which case 
a drop down list displays current performance 
statistics for the selected category. The Customer 
then selects a single performance statistics category 
from drop down list; 3) allowing a customer to specify 

35 range on statistic value using relational operators 

and numerical values, e.g., value >=80%; 4) allowing a 
customer to specify report date/ time range covering, 
for example, the previous 45 days of service. A 
customer can select start and stop date/time anytime 

40 within range; 5) allowing the customer to save the 
custom defined queries by providing a "Save Query" 
option; and, 6) providing an "Auto Run" function to 
allow custom reports to be run automatically and 
available when the default reports are produced , 

45 through the Broadband Inbox. Once the user submits 
the custom report request it is forwarded to the 
Broadband Inbox for subsequent view. 

When basic service option is provided, the t _ 
Broadband main display applet has the responsibility 

50 of: 1) requesting service type (entitlements) either 
from StarOE authentication server or as data from 
BackPlane (Figure 3) ; 2) requesting reports that are 
no longer on the Inbox server to be retrieved from a 
report data archive if a pre -determined period of time 

55 has elapsed, e.g., 45 days, and provide these repc>rts 
to the customer via the Broadband Inbox; 3) defining 
how the customer reports should be requested, e.g. 
report ID, date, etc.; 4) providing on-line context 
sensitive help for all aspects of the Broadband WEB 
60 application; 5) providing access to the Broadband 
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User's Guide; 6) providing the ability to ^pawn 
separate dialog windows, for example, to explain 
reporting activity in progress; 7) providing a "send 
mail" function to provide the customer with a method 
5 to create a mail memo for distribution to a help desk; 
and, depending upon the customer's service option, 8) 
providing access to custom reporting capability (Ad 
hoc Reporting) via toolbar and menu; and, 9) providing 
access to the SNMP features (Get/Set and Alarm) via 

10 toolbar and pull -down menu. 

Referring back to Figure 33, the user may select 
the BB Inbox feature as indicated at steps 954a-954c 
by clicking on the BB Inbox icon. By clicking the BB 
Inbox icon a download of the BroadBand Inbox applet is 

15 initiated, as indicated at step 956. Via this applet, 
the BroadBand View Inbox client requests all available 
report data (headers) from the Report Location 
Database as indicated at step 958. Then, at step 960, 
the RLD returns header information such as report 

20 name, id, location, date/time requested, data time 
produced to the client, and uses the information to 
autopopulate the entries in the Broadband Inbox at 
step 962. The report availability is then displayed 
in the BB Inbox (client) screen at step 964. It 

25 should be understood that by the time a user has 

received the welcome packages from nMCI Interact, 
backend data collection and report generation 
activities at the appropriate level of service have 
already begun. As a result, completed reports are 

30 available at the first login. 

Figure 34 (b) depicts an example Broadband view 
Inbox screen display 1740 having a screen area 1745 
for displaying the currently available reports. 
Referring back to Figure 33, a user may retrieve any 

35 report for viewing by double clicking on the report 

desired which action causes a request for the report 
and the appropriate viewer to be sent to the BroadBand 
Server, as indicated at step 968. BroadBand Server 
responds by locating the file (using the RLD) and _ 

40 transferring the file to the user and the appropriate 
viewer to the client. In the preferred embodiment, 
the user is enabled to display comma separated values 
("CSV") textual reports, as indicated at step 971; 
network health multigraph reports, as indicated at 

45 step 972; and, map reports, as indicated at step 973. 

Thus, in the preferred embodiment, the Broadband 
Report Viewer component includes Java applet viewer 
classes that enable the downloading and display of 
performance reports generated from the Broadband 

50 server 860. In the preferred embodiment, there are at 
least two types of viewer classes providing the 
following reports: 1) Monthly Network Health Reports 
which are static standard and multi -graph reports 
having three information areas: i) domestic latency, 

55 i.e., network delays; ii) delivery, i.e., network 

throughput; and iii) Peak Utilization, e.g., based on 
committed information rates; and, 2) Daily Network 
Health Reports which are static standard and multi - 
graph reports having the domestic latency, delivery 
60 and Peak Utilization reporting views, in addition to a 
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ability to select reports on a daily or monthly basis, 
a custom reporting Java applet is provided to enable 
customers to select Broadband "ad hoc 7 ' (one time) 
5 reports at any previously defined interval. For 
example, a customer may have a standard "Daily 
Throughput Performance" report delivered each day. 
However, for a particular day, the same customer may 
choose to submit an ad hoc "Throughput Performance" 

10 report for a previous time interval, e.g., previous 

week, or previous month. In the preferred embodiment, 
the Broadband web server adds completed report data in 
CSV to the Broadband Inbox server 27 0 which component 
enables the client reporting viewing process 215 to 

15 display reports. Particularly, the BB client 

application loads the report viewer, which loads the 
requested report and displays it to the user. For 
CSV/spreadsheet reports the user has the option to 
manipulate the data in the viewer. When viewing 

20 multi- graph reports such as the Network Health report, 
the viewer provides drill down capability: by double 
clicking on a section of a graph, the supporting data 
is displayed. 

The Broadband Report Viewer component 

25 additionally includes Java applet classes enabling the 
display of customer configuration maps which are two 
dimensional maps having certain locations ( highlighted, 
e.g., customer gateways, in addition to lines 
connecting two or more locations representing a 

30 customer's dedicated data transport paths, e.g., 
permanent virtual connections ("PVC") , as will be 
hereinafter described in further detail. Besides 
having the ability to generate network performance 
reports and configuration maps, the Report Viewer 

35 component of the Broadband Reporting tool includes 

Java applet classes enabling the presentation of real- 
or near real- time alarm and network event data 
obtained from the network management platform, 
"NetExpert" 87 0 as shown as Figure 31. Via a proxy 

40 application 871, events and alarm notifications are 
sent to the BB server 860 which processes the alarms 
for communication through the dispatcher/BBProxyServer 
applications directly to the BB client 852, via secure 
TCP/IP socket messaging, as will be described in 

45 greater detail hereinafter. 

Referring back to Figure 34 (a) , the selection of 
the report suppression option 1726 will enable the 
presentation of a BB view report suppression screen 
1750, an example screen of which is shown in Figure 

50 34 (c) . From this screen, the user is enabled to 
suppress or enable the particular selected report 
name, type, schedule, by selecting pull-down menu 
1755 . 

Furthermore, as shown in Figure 34 (a) , the 
55 selection of the archive option 1728 will enable the 
presentation of a BB view archive report screen 1760 
an example screen of which is shown in Figure 34 (d) . 
From the screen of Figure 34 (d) , the user is enabled 
to select the archived report to be displayed at the 
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BB Inbox by name, type, scheduling period,, and 
reporting time period in entry fields 1769. 

As further shown in Figure 34(a), the selection 
of the circuit location option 1730 will enable the 
S presentation of a BB view circuit location screen 1762 
an example screen of which is shown in Figure 34 (e) . 
From the screen of Figure 34 (e) , the user is enabled 
to retrieve network configuration information 
pertaining to that customer's network by clicking the 

10 appropriate circuit id and location field from a list 
1763. By clicking on this field, a textual report 
containing circuit configuration information may be 
displayed. The preferred method of reporting to a 
customer the current configuration of their MCI 

15 supplied virtual data network is via a web base 

geographical image map. The Broadband mapping report 
and Customer Configuration Map report are available 
for customers of all levels of service via the 
Broadband reporting system. 

20 Preferably, all Broadband customers receive a 

basic report set containing information on 
utilization, throughput and treatment of data 
transmitted over their virtual data networks as part 
of the default report set for the selected service 

25 option. Each service, e.g., SMDS and Frame Relay 
option, is provided reports specific to the 
performance indicators of that service (e.g. 
utilization, throughput and treatment of data 
transmitted over the virtual data network) . The 

30 actual reports and the reporting interval may be 

unique, based on the type of report although default 
reports are available. A Customer Configuration text 
report is included within a default set of reports. 
The mapping report is preferably updated on a daily 

35 basis based on changes that have occurred within the 

customer's network in the previous 24 -hour period. As 
the update is dependent upon a successful completion 
record, update latency can be greater than 24 hours 
from the actual event causing the change. 

40 The data source for the customer's Configuration 

Map and Customer Configuration text reports includes: 
a customer name; Billing id; contact (name and phone 
number of customer representative for this account ) ; 
customer's mailing address; and the company providing 

45 FR service, e.g., MCI; a location field comprising a 
mnemonic identifying the MCI point of presence (POP) , 
i.e., the city and state where the circuit is located; 
a circuit name assigned in circuit order management 
system for customer's FR access; a gateway field 

50 containing a mnemonic identifying the gateway that 
services this circuit; a Network Mgt. ID field that 
identifies the "NetExpert" system (Figure 30) address 
by gateway, slot, port, and channel in the router card 
cage for this circuit; a Bandwidth field indicating 

55 circuit speed; a # PVC field indicating the Number of 
PVCs associated with this circuit (circuit name) a CIR 
total field indicating the sum of the CIRs for all 
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PVCs on this circuit; an OVR SUB (%) field . indicating 
the CIR Total (above) divided by the bandwidth times 
100; a PVC field indicating a PVC number; a Gateway 
field comprising a mnemonic identifying the gateway 
5 that services circuit on the A side of the PVC; a 

Circuit field indicating the circuit name assigned to 
the A side of the PVC; a -DLCI field indicating the 
DLCI assigned to the A side of the PVC; a CIR field 
indicating the CIR for the A side of the PVC; a 

10 Gateway field comprising a mnemonic identifying the 
gateway that services circuit on the B side of the 
PVC; a Circuit field indicating the circuit name 
assigned to the B side of the PVC; a DLCI field 
indicating the DLCI assigned to the B side of the PVC; 

15 and, a CIR field indicating the CIR for the B side of 

the PVC. 

As mentioned above, the BB Report Viewer 
component includes the capability of displaying maps. 
The Map viewer displays all available (BB enabled) 

20 circuits provisioned for the user. Clicking on a 

circuit enables a display of the latest statistics for 
the circuit. All display functions including sorting, 
saving to disk and printing the report are executed by 
the viewer locally. 

25 In the preferred embodiment, there are two 

graphical views of the configuration report to support 
both the Standard and Enhanced service level options: 
Figure 35(a) illustrates the first map view 1770 which 
presents a two dimensional map of the United States 

30 with all end points of a customer's virtual data 

network represented with an indicator 1775, e.g. a 
star; Each star represents a customer's circuit end 
point location within an MCI data network, but may 
also indicate non-domestic frame relay, SMDS or LEC 

35 access end points. As shown in the Figure 35(a), 

selection of the "View all PVC's" button 1778 enables 
the presentation of all circuits supported in the 
network. A second map view 1776 may also be displayed 
such as shown in Figure 35(b) . From this view, the 

40 customer may drill down on a selected endpoint by 

clicking on an identified location 1777 and receiving 
a changed view (text box) that includes a description 
1779 of the physical circuits supported by that 
network end point. Thus, a click on any identified 

45 point provides greater detail about the circuits 
supported from that end point including: circuit 
location; Circuit number; Gateway mnemonic; Network 
Management ID; Bandwidth; # PVC; and, CIR Total. As 
shown in Figure 35(b), lines connecting PVC end points 

50 are also drawn by a mouse click on an identified end 
point. In the preferred embodiment, map views of 
Figures 35(a) and 35(b) are supported by invocation of 
Java applets which have the advantage that an image 
map implemented as a Java applet provides instant 

55 feedback to users. When a user clicks on a map 
displayed by a Java applet, the applet locally 
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computes a response to the click and instructs the 
browser to load a new page. 

Referring back to the report retrieval process 
flow 400 illustrated in Figure 33, at step 964, the 
5 customer is further enabled to delete a report by- 
selecting the delete report option. 

To delete a report, the user highlights the report in 
the Inbox listing (Figure 34 (b) ) and selects a delete 
function, as indicated at step 966. In response, at 

10 step 970, the client submits a delete request to the 
BB Inbox Server which locates the report, logs the 
request, deletes the file, and returns an 
acknowledgment to the client, as indicated at step 
9 74. Upon receipt of the acknowledgment, the Inbox 

15 client refreshes the display to reflect the deletion. 
Errors in the deletion activity result in an error 
message which is logged at the server, and returned to 
the Inbox client. In response, the client may notify 
the user of the deletion failure by a pop-up dialog 

20 box on screen. 

For the case of accessing SNMP capabilities, an 
SNMP application is launched from the Broadband SNMP 
Main Display Application if the customer has the SNMP 
dedicated or PRS Enhanced service option. Specific 

25 responsibilities of the SNMP application include: 1) 

providing SNMP Get/Set operations including: obtaining 
the selected variables from the Enterprise MIB upon 
initialization; 2) communicating with BBProxyServer 
and Broadband server database; 3) invoking Get /Set 

30 operations on MIB and returning results and displays; 

4) providing an Alarm Panel for displaying alarms t and 
event reporting; 5) handling customer near real time 
notification of updates to these alarms if the 
customer's web browser is pointed to a Broadband web 

35 page; and, 6) providing customer with SNMP get 

capability for the lowest interval data, e.g., 15 
minutes to 1 hour. 

Thus, as further shown in Figure 34(b), the 
selection of the SNMP Alarm option 1724 enables the 

40 presentation of a BB alarm panel screen 1765 an 

example screen of which is shown in Figure 34(f). 
From the screen of Figure 34(f), the user is enabled 
to retrieve and view their virtual network alarm 
conditions including the following indications: an 

45 alarm type; circuit id; alias; alarm severity level; 

alarm trap level; alarm description; and, date of the 
alarm. 

In one embodiment, as shown in Figure 34(f), the 
alarm data is handled by listing all of the PVCs and 

50 the associated Access Circuits as well. For each PVC 
and Access circuit all relevant events and alarms will 
be displayed. Preferably, color coding is used for 
indicating alarm severity in compliance with OSI 
standards, e.g., orange for major, red for critical. 

55 In the preferred embodiment, Broadband alarms may be 
grouped into two categories: Network Detected alarms 
and User Defined alarms. Network Detected alarms 
include: "Set alarms'' that are generated when a 
condition exists indicating service degradation or 
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failure, and "Clear alarms" which are generated when a 
previously set alarm condition no longer exists. 
Particularly, in order for alarm data to be updated, 
the alarm collection server process invokes two 
5 methods on BBProxyServer : 1) a "recordAlarm" method 
which records an alarm and writes the alarm data to 
the database; and 2) a "clearAlarm" method which 
clears an alarm and removes it from the database. 

It should be understood that all Network Detected 

10 Alarms are event -based and discovered by SNMP Network 
Management tool. User Defined Alarms include "Ad-Hoc 
Threshold" alarms which are generated in instances 
where a customer set value in a custom report is 
exceeded. The alarms are generated as the reports are 

15 updated; based on the polling frequency, and only when 
the customer set threshold is exceeded. User defined 
alarms additionally includes SNMP alarms which are 
generated when a customer defined alarm condition 
exists based on the SNMP service. 

20 Assuming that order entry for the user has been 

completed and the user is provisioned with a level of 
service which includes SNMP functionality, the user 
has additional access to SNMP functions Get and Set. 
The Get and Set represent paired functionality which 

25 is accessed when the user selects the SNMP Get/Set 

option 1732 from the BroadBand View Main Display of 
Figure 34 (a) . The selection of the SNMP Get/Set 
option 1732 enables the presentation of a BB SNMP 
Get/Set screen 1731 an example screen of which is 

30 shown in Figure 34 (g) . From the screen of Figure 

34(g), the user is enabled to: Get SNMP statistics and 
Set SNMP name. 

Particularly, the process flow for providing SNMP 
Get/Set capabilities begins by invocation of an SNMP 

35 applet which is sent to the client workstation by the 
BB Server application. By selecting the SNMP Get/Set 
button 1732 (Figure 34(a)) from the main display 
causes the creation of a SNMPGet SetApp (COApp) object 
to manage the session and create a series of objects, 

40 SNMPGetSetFrame, SNMPGetSetView, SNMPGetSetModel and 
SNMPGetSetController to handle the presentation 
to/interaction with the user. This also results in 
the presentation of the get/set display window (Figure 
34(g)) having a dialog box 1731 presenting the user 

45 with the customer, PVC or circuit to be queried. 
Particularly, the SNMP client stub invokes the 
following BBProxyServer methods for populating the 
dialog box with the PVC and circuit information: 1) a 
getSnmpCategories ( ) method for communicating the 

50 request to retrieve SNMP variables from the MIB; 2) a 
"getPVCList ( ) " method for returning a list of customer 
PVC's; and, 3) a "getCircui tList ( ) " method for 
returning a list of customer's access circuits, i.e., 
circuit IDs. Preferably, the appropriate service is 

55 invoked on BBProxyServer, the BroadBand database is 

queried and the results are returned to the customer 
browser for display. The user selects the desired 
SNMP category 173 3, e.g., customer, PVC, or access 
circuit, to be queried. For instance, as shown in 

60 Figure 34 (g) , the selection of the PVC Statistics 
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category 1733 will enable the. variable list: box 1735 
to be updated with a list of only those variables from 
the selected category. 

When a SNMP variable "GET" operation is desired, 
5 the user selects the particular SNMP variable. Then, 

the user invokes the get operation by selecting the 
GET button 1738 from the-Get/Set display of Figure 
34 (g) . Selection of the GET button causes the SNMP 
client stub to invoke the BBProxyServer side 

10 "getAttribute" method which returns object <String>, 

the string being an SNMP attribute name, to the 
customer browser. By invoking the "getAttribute" 
method, the request is submitted to the BB server and 
communicated to the MIB to retrieve SNMP attributes, 

15 e.g., circuit and PVC statistics. The MIB obtains the 
latest SNMP data, transfers the data to the BB server, 
and returns control to the BB Client which handles the 
display of the data to the customer (Figure 34(g)). 
Particularly, the BB server issues a GetService 

20 request in turn to the MIB on the appropriate 

switch (es). The MIB locates the latest polled status 
information and returns the data to the server, which 
passes the data back to the client with a GetService 
Response message. Upon receipt of the data, the 

25 client closes the thread and updates the display. 

Finally, the user may submit requests for SNMP 
variables from other circuits, or, may end the 
session. Likewise, when the user wishes to Set a 

circuit name, the user first selects the particular 

30 SNMP variable and further, enters the "alias" variable 
value for the selected SNMP circuit. This "alias" 
variable value is entered in the "value" entry field 
1737 as shown in Figure 34(g). Then, the user invokes 
the set operation by selecting the SET button 1739 

35 from the Get/Set display of Figure 34(g). Selection 
of the SET button causes the SNMP client stub to 
invoke the BBProxyServer side "setAttr ibute" method 
which updates the selected SNMP variable in the 
Broadband database sets. By invoking the 

40 "setAttribute" method, the request is sent to the BB 

server which issues a setServiceO request to the MIB 
on the appropriate switch (es). The MIB changes the 
(user defined) alias assigned to the circuit and 
returns an acknowledgment to the server, which passes 

45 it to the client with a SetService Response message. 

Upon receipt of the data, the client closes the thread 
and updates the display, acknowledging that the 
circuit name has been changed. Finally, the user may 
submit new requests to set SNMP variables from other 

50 circuits, or, may end the session. As in the case 

of Broadband network systems reporting, the nMCI 
Interact suite of network management applications 
further includes an event monitor tool 10 0 0 for 
enabling customers to monitor, over the Internet or a 

55 company Intranet, their dedicated voice and data 

circuits. A Web-based user - friendly interface 
presents network alarms on degraded or broken circuits 
and provides network performance and alarm 
information, thereby effectively increasing the 

60 efficiency of troubleshooting and allowing customers 
to make informed network management decisions. 
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More specifically, the Event Monitor tool 1000 of 
the nMCI Interact System gives customers the ability 
to: exercise alarm management from a single 
workstation, the management including, triggering the 
5 alarms and clearing the events; acknowledge or 

recognize new alarm conditions as they occur; receive 
notification of fiber outages that impact their data 
circuits; define or display customized troubleshooting 
procedures for specific alarm or circuits; access a 
10 comprehensive database of their dedicated voice and 
data circuits; display or print lists of active 
alarms; define or display customized alarm filters to 
specify which alarms will appear in the alarm 
presentation; and generate reports about network 
15 performance. 

A general block diagram illustrating the event 
monitor system architecture 1000 is shown in Figure 
36. Generally, as shown in Figure 36, the Event 
Monitor system 1000 is integrated within the nMCI 
20 Interact system comprising: the user web browser 14 
which employs an event monitor GUI 103 0 enabling the 
generation of requests and receipt of responses from 
various event monitor system server processes 1050 
over the Web/Internet via a secure socket connection 
25 for presentation of event monitor's alarms and 

reports; report viewer 215 and requestor processes 212 
(Figure 10) of the StarWRS tool 200 which provides the 
support for generating and presenting reports relating 
to the conditions of the customer's voice and data 
30 networks as described herein; a corresponding server 
side reporting component having the above described 
inbox, report scheduler and report manager components, 
in addition to alarm and report viewer and requestor 
components implementing Java applets having viewer 
35 classes that enable the downloading and display of 
performance reports generated from event monitor 
server processes 1050. In the preferred embodiment, 
the viewer classes provide the following types of 
network alarms on dedicated circuits that carry the 
40 following service types: inbound services, e.g., toll 

free and 9 00 numbers; outbound services, e.g., 
Vnet/Vision, and PRISM; and data services such as TDS 
1.5. The circuit types for which the present 
invention presents network alarms include: dedicated 
45 access lines such as DALs; TDS 1.5 circuits; TDS 4 5 

circuits, DDS/DSO point to point circuits; ISDN DALs; 
and SW 56 DALs. In addition, the event monitor 
reporting feature enables customers to review alarm 
data over a period of time by creating and saying 
50 reports . The reports which may be generated include 
alarm summary, alarm detail, alarm duration, data 
circuit performance, and DAL performance. The alarm 
and performance reporting scheme effectually allows 
the customers to perform alarm trending and analysis, 
55 and to correlate alarm occurrences to network 

availability, network performance and problem 
resolution. Reports for fault reporting may be 
requested through the report requestor component of 
StarWRS , and retrieved from the STarWRS inbox. 
60 Recurring reports may be requested on a timely basis, 
e.g., hourly, daily, weekly, and monthly. Moreover, 
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through the report requestor, a user may specify 
whether the user should be paged or e-mailed when a 
report is in the inbox. 

It should be understood that the event monitor 
5 tool may be integrated with the Broadband network 

reporting service to provide a comprehensive network 
performance reporting and alarm monitoring system. 

Also shown as part of the event monitor system 
architecture 1000 of Figure 36 is the web 

10 server/dispatcher component 1035 which provides for 
the transport between the web browser and an event 
monitor proxy interface including all authentication 
and encryption. Thus, secure communication from the 
customer browser to a DMZ web server is enabled over a 

15 first TCP/IP socket connection, such as SSL , and 

communication from the DMZ web server over an 
enterprise firewall to the dispatcher server is 
enabled over a second TCP/IP socket connection. These 
secure paths enable customer requests and server 

20 responses to be communicated from the client browser 

to the event monitor server 1050. 

Specifically, the dispatcher forwards user 
requests to the event monitor server process 1050 that 
employs an integrated proxy application 1040 for 

25 receiving and interpreting the user messages and 

enabling the event monitor functionality. This proxy 
capability includes a multithreaded engine enabling 
multiple, simultaneously executing sessions supporting 
anticipated user load. The interface between the 

30 dispatcher server 103 5 and the event monitor proxy 
process 1040 is also message-based, e.g., employing 
TCP/IP socket transport, and, as will be described, a 
defined messaging protocol which includes a generic 
message header followed by proxy - specif ic data. In 

35 the other direction, the same process is employed, 

i.e., the event monitor proxy 1040 sends the generic 
header followed by the proxy- specif ic response back to 
the dispatch server 1035 for communication over the 
firewall (not shown) and back to the user browser 20. 

40 In the embodiment shown in Figure 36, the 

necessar y CSV data files and report definition 
metadata files may be downloaded to the StarWRS inbox 
messaging server 270 for eventual presentation to the 
StarWRS browser- side components 212, 215 for 

45 subsequent access. It should be understood, however, 

that all event monitor responses including CSV data 
files and report definition metadata files are 
forwarded through the dispatcher and intervening DMZ 
web servers for eventual display at the client. 

50 Additionally, the event monitor may return a report 
object of variable length which includes the report 
data to be displayed at the client workstation. 

In a preferred embodiment, the event monitor 
server 1050 performs the various database queries and 

55 function calls in response to requests received from 
the customer via the event monitor proxy 1040. 
Particularly, the event monitor server 1050 is 
responsible for all tasks leading up to and including 
the management of alarms and performance reports 
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including data collection, calculation, storage, and 
report generation. 

In operation, the event monitor server 1050 
supports communication with the StarOE server 
5 component 3 9 which provides order entry functions 

including functionality necessary to manage (create, 
update, delete) event monitor users, and allows for a 
feed of the appropriate order entry information to the 
event monitor server in order to properly associate 

10 the appropriate event monitor functionality and data 

to the right customer once given admission to the 
event monitor service. Thus, a messaging interface is 
provided between StarOE 39 to the event monitor server 
1050 functioning as a client to receive authentication 

15 information including logon user identifiers which are 
supplied in response to launch of the event monitor 
GUI applet 1030. The billing identifiers and levels 
of services, including the specific entitlement 
information are supplied from StarOE 39 to the event 

20 monitor server 1051) via flat files which may be 
generated daily. 

From the back-end legacy host, the event monitor 
server 1050 receives statistics on voice (DAL) and 
data (TDS 1.5) services for providing its 

25 functionality to the event monitor users. The DALs 

are groups of dedicated 64K circuits that carry voice 
traffic to and from a customer's premise terminating 
equipment, i.e., PBX, to a telecommunication service 
provider's switch. A TDS 1.5 data circuit is a 

30 dedicated point-to-point circuit that spans from one 
customer location directly to another. The data 
circuit includes at least two monitoring units, called 
Extended Superframe Monitoring Units (ESFMUs or ESF 
Cards) , which generate alarms and collect statistics 

35 on the performance of the circuit. Alarms are 

presented near real-time and indicate that there is a 
failure associated with the data circuit. Performance 
statistics are compiled in 15 -minute intervals and are 
used to derive performance alarms that provide the 

40 users with the indication that their network 

performance is degraded before the problem becomes 
service impacting . 

Performance statistics are compared against pre- 
set performance parameters and deviations from these 

45 parameters are recorded. When a given threshold is 
exceeded, alarms are generated and notification is 
sent to the customers such that the customers may then 
view alarms and take necessary steps to correct the 
problem. The performance parameters and thresholds 

50 may be modifiable via the event monitor GUI applet 
1030 by those customers having proper access level 
entitlements as verified by the StarOE 39. Each of 
the components shown in Figure 3 6 and their respective 
processes will be described in further detail herein. 

55 

Event monitor GUI client application 

All alarms and reports for event monitor are 
accessible via the "networkMCI Interact" alarming and 
reporting structure established within the nMCI 
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Interact home page 79. Event monitor alarms are 
viewed via an alarm monitoring system in which both 
broadband and event monitor alarms may appear. The 
event monitor GUI client application is launched via 
5 the event monitor icon 87 on the home page (Figure 

5(a)). Reports for fault reporting may be requested 
through the report requestor component of StarWRS, and 
the inbox server. 

In the preferred embodiment, the event monitor 

10 GUI client application 1030 is launched by selecting 
the event monitor icon 87 from the "networkMCI 
Interact " home page (Figure 5(a)). The event monitor 
GUI client application provides a menu bar, toolbar, 
and status bar for accessing event monitor services 

15 depending on the customer's service subscriptions. 

Event monitor service availability is determined by 
user logon session with StarOE server 1060. If the 
user is not entitled or does not have authorization 
for a particular service, the corresponding toolbar 

20 icon or menu item is disabled. Thus, in accordance 
with the customer service option, the corresponding 
service icon and/or menu item is not activated and 
would not respond to a user input. 

In providing its basic services, the event 

25 monitor display applet may have the responsibility of: 
1) requesting reports that are no longer on the inbox 
server to be retrieved from a report data archive if a 
pre- determined period of time has elapsed, e.g., 45 
days, and provide these reports to the customer via 

30 the inbox; 2) defining alarm thresholds and parameters 
and trouble shooting procedures; 3) defining how the 
customer reports should be requested, e.g., report id, 
date, etc.; 4) providing on-line context sensitive 
help for all aspects of the event monitor web-based 

35 application; 5) providing the ability to spawn 

separate dialog windows, for example, to explain 
reporting activity in progress; and 6) providing 
access to custom reporting capability via the toolbar 
and menu . 

40 In the preferred embodiment, the event monitor 

GUI application is implemented in Java to ensure 
platform independence and particularly is developed 
using many of the networkMCI Interact' s common objects 
as described herein. Particularly, the Event monitor 

45 GUI application, via the COApp object, may create its 

own display space and present its user interface in a 
separate frame by having the space in one or more 
COAppFrame windows. The COAppFrame class and its 
COStdAppFrame subclass are wrappers for the Java Frame 

50 class which provide COApps with standard look-and- f eel 
elements and implement some standard behavior, such as 
participating in COBackPlane' s window management 
functions. The COAppFrame is a desktop window, 
separate from the browser. It presents the user with 

55 a preset layout of a menu, toolbar, status bar, 

enterprise logo, an application icon, etc., and a main 
viewing area. Since a separate frame does not need to 
be located inside a Web page, a concurrent (side-by- 
side) access to more than one networkMCI Interact 

60 application service is possible. 
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In another embodiment, the event monitor GUI 
application's startup code may be implemented using 
the COApplet class. 

For determining the user's event monitor service 
5 options, the GUI client application requests and 

retrieves user profiles including the user 
entitlements from an event monitor customer database 
populated by a periodic feed (e.g., on a daily basis) 
from StarOE 39 (Figure 36) . 

10 From the event monitor GUI client application, an 

alarm management object is also launched upon 
initialization of the GUI client application. The 
alarm management object essentially creates a blank 
user interface and starts a thread to handle 

15 communications with the event monitor server for 

events or alarms. The alarm thread is created to run 
periodically, e.g., every two minutes. Specifically, 
the AlarmThread invokes a COAsynchronousTransaction 
with the web server to poll for current event monitor 

20 alarms. When the AlarmThread receives the data back 
from the web server, it creates a command to update 
the display and executes the command. 

The event monitor alarms are generally grouped 
into two categories: voice alarms and data circuit 

25 alarms, including broadband and SNMP alarms. Voice 
alarms are further divided into two types: service 
outage alarms which are generated when a percentage of 
circuits in a trunk group are not available to 
complete calls; and traffic alarms which are generated 

30 when a percentage of DALs reach a predefined 

percentage for blockage, terminating failure rates and 
originating failure rates. Traffic alarms are based 
on data accumulated for five or thirty minute 
intervals. Data alarms are divided into two types: 

35 service affecting alarms which are generated m 

instances where the service cannot be used because 
there is a loss of signal, unframed signal or 
equipment failure; and performance affecting alarms 
which are generated when high error rates are received 

40 for ten seconds or more, out -of -frame conditions occur 
or frame slips exist but service is still available. 
A Drill down view depicting each alarm down to the 
individual circuit is available via the GUI as will be 
described below. 
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Reporting functionality 

As described above, the existing and new event 
monitor reports may be requested via the report 
requestor, a component of StarWRS. The reports are 
5 then posted in the inbox. Customers view the reports 

by launching the report viewer applet, another 
component of StarWRS . Once the report is made 
available, at the customer's preference and selection 
based on priorities and severity, the customers may 

10 receive notification through one or any combination of 
page, e-mail, or fax in addition to the display option 
of the notification on the customer's inbox. For 
example, a customer may choose to receive page and e- 
mail notification on all level 1 severity alarms and 

15 just display notifications in the inbox for level 2 
severity alarms, etc. 

Recurring reports may also be created by the user 
to run on a timely basis, e.g., hourly, daily, weekly, 
and monthly, as well as ad hoc (one time) reports. 

20 For example, a customer may have a standard < DAL 

performance report delivered on a daily basis, and on 
a particular day, the same customer may choose to 
submit an ad hoc DAL performance report for any given 
interval, i.e., previous hour, previous several hours 

25 or days . 

In addition, the event monitor may provide the 
ability to drill down within customer's premise 
equipment to view a breakdown of the customer's 
equipment and the ability to monitor performance and 

30 report alarms on individual channels within each 

circuit. Giving customers the capability to create 
and save a variety of reports and graphical views 
allows them to perform customized trending and 
analysis for maintaining better control and problem 

35 resolution schemes during their network management 
process . 

Moreover, the event monitor presents via the 
report viewer applet, the map of the continental U.S. 
(World for global customers/services) for purposes of 

40 displaying the configuration of a customer's network. 
The customer may view their sites, the various _ 
connections between any two or more of these sites, 
and information about each specific site and circuit. 
The topographical mapping display allows customers to 

45 see a logical depiction of their network. The ability 
to drill down into individual sites, nodes and 
circuits are also available via the viewer applet. 
For example, if a customer has a circuit between New 
York and Los Angeles the highest level of the map 

50 shown may be the two locations on either end as well 
as the circuit between them. If a customer clicks on 
the circuit itself, raw data pertaining to the current 
throughput of that circuit or any alarm conditions 
that exist on the circuit may be displayed. 

55 Additionally, if the customer clicks on either of the 
two locations, further drill down for logical design 
layout of the customer premise equipment, such as a 
DSU or CSU, may be enabled. Furthermore, if alarms 
are present for that particular site, the drill down 
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view may depict each alarm down to the individual 
circuit on a 24 channel T-l. 

Another type of reporting service provided by the 
event monitor is called an integrated management 
5 services bouncing busy intervals report. This report 

provides a picture of a DAL group during its busiest 
time of the day by reporting statistics for the 
current or one of the previous 7 days at the busiest 
interval. The busiest interval is defined to be the 

10 30 -minute or 60 -minute time period in which total 

usage was at the highest point. Other reports which 
may be obtained through the event monitor include: 
monitoring and performance reporting of individual DS3 
and OC3 circuits, IDSN channels, International voice 

15 or data point-to-point private lines, El lines; and 
trunk utilization reports. 



Alarming functionality 

The event monitor presents all detected alarms to 

20 the customer automatically, without the customer's 
intervention. The detected alarms within the event 
monitor are sent to the customers' inbox for 
spreadsheet display for on-line reviews. All current 
alarms are retrieved by the customer's web browser GUI 

25 applet using polling techniques at session initiation. 
Customers may define a period of time during which 
their alarms remain in current status, allowing non- 
current alarms to be deleted. 

In addition to providing alarm notifications to 

30 customers, the event monitor may also provide a scheme 
in which a pre-defined trouble shooting procedure, 
modifiable by a customer, is launched automatically 
when an alarm is detected. For example, if an alarm 
is generated regarding a fiber outage that impacts a 

35 customer's toll free circuit, an option allows the 
user to go directly from the alarm message in the 
inbox to the appropriate alternate routing plan. t In 
order to integrate two services, i.e., event monitor 
with toll free network manager (TFNM) , the event 

40 monitor key data and alarm are communicated to allow 
TFNM to find the appropriate routing plan associated 
with the outage. The key data may include: toll free 
number, service id, circuit id, and type of service, ( 
e.g., toll free or broadband. The TFNM application is 

45 typically launched directly from an alarm view with 
the above parameters for finding the associated 
routing plan. User profile information needed by TFNM 
for authentication and entitlement verification before 
actually proceeding with the alternate routing plan, 

50 are also passed as parameters to the TFNM application 
at the same time. 

Performance metrics 

The event monitor follows and conforms to general 
55 "networkMCI Interact" reporting standards in order to 

provide a consistent and common interface to the 
customers. Weekly reports do not have to be on a 
calendar week and may cover any consecutive 7 days. 
Monthly reports are, unlike the weekly reports, 
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calendar based and are defined to cover the entire 
month. Ad-hoc reports are reports outside the pre- 
selected reporting structure and are available to 
customers within two minutes from the point of request 
by customers. 

In a preferred embodiment, the event monitor 
alarms are distinguished into two types: event -based 
alarms, and statistical alarms. Event-based alarms 
are alarms generated on the physical connection 
between the customers CSU/DSU circuits and the 
telecommunication service provider's switches, e.g., 
alarms occurring due to a loss or bring -down of a 
circuit. In addition, the customer may specify this 
notification to be sent as a page, fax, or e-mail. In 
these cases, the notification is sent within the 
required 30 -second window from the moment the alarm is 
detected by the event monitor. 

Statistical alarms are alarms generated due to 
the percentage of down time or of other statistical 
nature. Statistical alarms depend on the frequency at 
which the customer's web browser is polled, e.g., 2-4 
minute intervals. Once polling is established and an 
alarm is detected, the time - to - deliver notification of 
the alarm is similar to the event -based alarms, i.e., 
within 3 0 seconds. 



The event monitor back -end configuration 

Figure 37 illustrates an example of a back-end 
configuration 1002 for the fault management system for 
reporting telecommunication service conditions. The 
back-end configuration includes a network management 
system 1004 which collects network events, including 
alarms and traffic densities from a common carrier 
network 1006. All of the events collected by network 
management system 1004 are reported to an event 
monitor host 1008. The common carrier keeps track of 
the performance and network faults for network 1006 
through a myriad of network management systems 10 04 
and routes the information in real-time to the event 
monitor host 1008. In order to provide information 
regarding a particular customer's leased services, 
events collected by event monitor host 1008 are 
downloaded to event monitor server 1050. 

Event monitor server 1050 accumulates in near 
real-time a database of events pertinent to each 
customer's leased services. The accumulated data is 
viewable via the client browser application GUI and 
also via the StarWRS reporting system as described 
above. Because individual customers may subscribe to 
various different services which may experience 
different events, event monitor server 650 must not 
only collect different sets of data on a real-time 
basis, but the client browser application GUI and the 
reporting system must also present the data in a > 
format relevant to the particular services to which 
the customer subscribes. This data may be organized 
for display to the user in an event queue. 

In the preferred embodiment of the present 
invention, event monitor host 1008 is an Integrated 
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Network Management System (INMS) host implemented as 
an IBM S/37 0 mainframe and the event monitor server 
1050 is implemented as an IBM RS6000 computer; the 
architecture of this embodiment is depicted in Figure 
5 38. The present invention may be implemented in other 
ways, as would be apparent to one skilled in the 
relevant art. - 

Referring to Figure 38, INMS host 1008 operates 
in an IBM Customer Information Control System (CICS) 

10 environment and includes an IBM virtual 

telecommunications access method/network control 
program (VTAM/NCP) interface 1012 for making an IBM 
System Network Architecture/Logical Unit interface 
version 6.2 (SNA LU6.2) connection to a mainframe 

15 client gateway (MCG) 1014 of INMS host 1008. The MCG 
1014 in turn makes a Transport Control 

Protocol/Internet Protocol (TCP/IP) connection to IBM 
RS6000 event monitor server 1050, which operates under 
the IBM Advanced Interactive Executive (AIX) 3.2.5 

20 operating system. 

Server 1050 comprises two servers: a Structure 
Query Language (SQL) server 1016 and an open server 
1018. Open server 1018 receives events from INMS host 
1008 and stores them on a database 1010 stored on 

25 server 1050. The SQL server 1016 is a database engine 
providing access to and managing database 1010. In 
the preferred embodiment, database 1010 is a Sybase® 
database and SQL server 1016 is a Sybase® SQL server. 
Database 1010 compiles information that is sent 

30 on a regular basis by INMS host 1008. The data stored 
in the SQL server may be queried at will by a user via 
the client browser application for analysis. Database 
1010 is a relational database using SQL server 1016 as 
the database management system (DBMS) . In the 

35 preferred embodiment, database 1010 comprises two 

databases. The first database includes information 
relevant to other network management applications (for 
example, MCI Service View®) , such as facilities and 
circuit prefixes, and a customer mapping table for all 

40 customers subscribing to the event monitor service. 

The second database includes statistics relating 
to the various facilities monitored by network 
management system 1004. In the preferred embodiment, 
these statistics are compiled and updated on a regular 

45 basis, by MCI Extended Super Frame Monitoring Units. 

An additional database accessed and utilized by 
the fault management system is a customer database 
located with the StarOE server 1050. This database 
includes specific event information such as alarms, 

50 reporting and user information. It also tracks the ( 
users who log on from the various client terminals via 
the client browser applications and stores such 
information as the user's log on password, access 
security, and the various alarm descriptions and their 

55 status as reported by network management system 1004. 

Database 1010 includes a number of tables of data 
which are accessed by the client browser application 
GUI to event displays, including alarm displays, alarm 
report, facilities cross-references and event log 
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displays. In addition to the StarOE authentication 
and entitlement checking, user access to database 1010 
is monitored by SQL server 1016; levels of security 
may be provided to permit tiers of access to different 
5 levels of information within database 1010, as would 

be apparent to one skilled in the relevant art. 

The data within database 1010 is organized in 
views. For example, an alarm view provides an alarm 
description, an alarm severity representing the degree 

10 of consequence for the alarm, and selected conditions 
associated with the alarm. 

The interface between INMS host 1008 and server 
1050 is one-way, from the INMS host only. In this 
scenario, the INMS host 1008 is a client, issuing 

15 calls for stored procedures to SQL server 1016 via MCG 

1014 when there is an event to report. 

When MCG 1014 receives a request from INMS host 
1008, it accepts an LU6 . 2 conversation and creates a 
local area-networked-based connection to SQL server 

20 1016. The request is then forwarded to SQL server 

1016, which updates database 1010 with the information 
sent by INMS host 1008. 

Figure 39 is a high level logic flowchart 
depicting the operation of the preferred embodiment of 

25 the present invention. Typically, a customer 

subscribes to several particular leased services. In 
order to limit data collection to data germane to 
those particular services, the user must specify the 
data to be collected. The user does this by defining 

30 an event view of data to be collected, as shown in a 
step 102 0. The event view specifies, for example, 
which services are to be monitored and what data is to 
be collected and reported for those services. For 
example, the event view may include the following 

35 items: 

Severity: critical, major, minor, informational, 
no alert. 

Service Types (MCI): 800, 900, TDS 1.5, TDS 45, 
VNET, Prism®, Vision®, ISDN, SW56, and DDS/DDO. 
40 Corporate Identifiers: A list of corporate 

identifiers related to the customer's enterprise and 
for which the user is authorized access. 

Facilities: All elements of a physical telephone 
plant required to provide a service and to which the 
45 user is authorized access (for example, trunk groups 
and circuits) . 

Data Elements: The user can configure a 
customized event view by selecting the data fields to 
be displayed. 

50 Date and Time Elements: The user can configure a 

customized event view by selecting the date and time 
period for the custom event view. 

Sort Order: The user can configure a customized 
event view by selecting, for example, the data fields 
55 on which the data to be displayed is sorted. 

Once the event view has been defined, the client 
browser application transmits a transaction request to 
the server 1050 via the web/dispatch server. An SQL 
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statement is generated at the server 1050 ,to create 
the event view from data stored in database 1010. In 
the preferred embodiment, the SQL statement is 
constructed such that each element /field is joined by 
5 an "AND" and values within each element/field are 
joined by an "OR." Thus, an example partial SQL 
statement may be depicted as follows: 

Severity = critical OR severity = major 
10 AND 

Service Type = VNET 
AND 

CORPID = 123434 OR CORPID = 32432423 
AND . . . etc. 

15 

The SQL statement created in step 1023 is 
forwarded to SQL server 1016. The SQL statement 
identifies to SQL server 1016 the particular stored 
procedure to be activated to obtain the event view 
20 specified by the SQL statement. The SQL server 1016 

then executes the stored procedure and builds a report 
of event data specified by the event view, as shown in 
a step 1028. 

Once the event report is built, it is sent to the 

25 client browser 20 via the web/dispatcher servers. The 

events are typically loaded into an event queue. The 
events in the event queue are sorted by sort criteria 
entered by the user when defining the event view, as 
shown at step 1032. In a preferred embodiment, the 

30 primary sort criterium is severity. The sorted events 
are displayed to the user on the client browser 
application GUI in a step 1034. Each event displayed 
is accompanied by an acknowledgment field for the user 
to indicate his acknowledgment of the event; for 

35 example, the user may acknowledge an event, if so 

authorized, by entering an asterisk in the associated 
acknowledgment field. When the user acknowledges an 
event, as indicated by the "Y" branch from step 1036, 
the client browser application reports the 

40 acknowledgment to server 1050, as shown at step 1038. 
When the user has acknowledged the last event m the 
event queue, as indicated by the "Y" branch from step 
1040, event processing ends. At this point, the user 
may either retain the session or close it. 

45 if the session remains open, server 1050 will 

report new events defined by the event view as they 
are received by server 1050. When server 1050 
receives a new event, as indicated by the "Y" branch 
from step 1042, processing resumes at step 1028, as 

50 shown in Figure 39. 

Thus, in accordance with the event view defined 
by the user and communicated to event monitor server 
1050, reports of events identified in the event view 
may be continuously forwarded to the client browser 

55 application, and made available in an event queue for 
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display to the user in order of the severity of the 
event . 
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CALL MANAGER 

Another application of the suite of 
telecommunications network management applications is 
the call manager ("CM") system which provides 
5 sophisticated mechanisms, e.g., intelligent call 

routing, for call center customers to control delivery 
of toll free calls from the telecommunications 
enterprise network to call centers, including call 
centers having multiple Automatic Call Distributors 

10 (ACDs) . Particularly, using the CM system the 

customers have the ability to define routing rules 
which, on a call by call basis, determine the best 
place to route incoming toll free calls. A high level 
overview of the call manager system environment 110 0 

15 is illustrated in Figure 40. The call manager system 
1100 generally includes a service control point (SCP) 
1110 for providing call manager routing features, 
known as "call by call" (CXC) routing; an intelligent 
routing customer element (ICE) (not shown) ; an 

20 intelligent routing host (IR host) 1112; and client 

workstations, i.e., call manager webstation client 
1130, and/or Nexus workstation client 1126. The SCP 
1110 is a routing engine which essentially maintains 
call routing rules and uses those rules to determine 

25 where to route the calls. A typical call processing 
flow for a call received from a caller 1122 includes 
routing requests and responses from the enterprise 
switches 1124 through above-mentioned data access 
points (DAPs) 616 and remote data gateways (RDGs) 1118 

30 into and out of the SCP 1110. The DAP 616 executes a 
routing plan by translating a toll free number passed 
by the switch 1124 into a network number, and maps it 
to an address. The RDG 1118 provides a standard 
gateway allowing communication between the SCP host 

35 1110 and the enterprise's backbone network. The 

translated network number is then communicated to the 
SCP host 1110 via the RDG 1118. 

Data collection and storage of ACD-based 
statistics from customer call centers and network 

40 statistics are supported by DAP traffic statistics 

(DTS) 1114, the IR host 1112 and the ICE components. 
The DTS collects network routing statistics from the 
DAP 2906 and passes them to the IR host 1112. The IR 
host 1112 stores routing statistics from DTS 1114 and 

45 the ACD 1120. The ACD 1120 data statistics are 

collected by the ICE for each ACD 1120, normalized by 
the IR host 1112 and provided to the SCP 1110. When 
the SCP 1110 receives a routing request, the SCP 1110 
typically determines the best location to route a call 

50 by modeling each call center using periodic Automatic 
Call Distributor (ACD) 1120 data statistics to keep 
the model in line with what is actually going on at 
each location. 

Upon completion of call processing according to 

55 customer routing plan, the DAP 29 06 passes routing 
instructions to the switch 1124 for setting up the 
call to a customer's ACD 1120. The ACD 1120 balances 
the load of calls based upon customer defined rules 
such as the "busy-ness" of a call center. Calls may 

60 be distributed evenly using "round robin" technique, 
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or directed in which calls are routed based on a 
ercentage allotted to each destination identifier, 
oice communications are carried from the switch 1124 
to the ACD 112 0 which terminates the call at the 
5 appropriate trunk or destination identifier. 

The routing capabilities supported by SCP 1110 
include a termination selection based upon one or more 
of the following: initial list of eligible destin- 
ations, destinations eliminated from consideration 
10 based upon tested conditions, artificially biased 
evaluation criteria, percent allocation, and 
manipulation of user -defined peg -counter variables. 
SCP 1110 also supports the routing and blocking of 
incoming calls using event- level data based on one or 
15 more of the following characteristics: day of the 

week, day of year, preference of destination choices, 
time of day, membership of the automatic number 
identification (ANI) or caller entered digits (CED) in 
a defined list of values, load balancing and/or 
20 availability at specific destinations, user-defined 
quota schemes, user-defined peg- counters , preference 
of destination choices, and artificial bias of load 
balancing algorithms . 

The Call Manager Integrated Data Server (s) 

25 (CMIDS) 1140 are included to provide a front -end 

functionality to the SCP host 1110 and off-load 
various workstation -related processing from the 
routing engine. In addition, the CMIDS 1140 may 
directly access data stored on the IR host or on other 

30 data servers. Further details of the CMIDS 1140 will 
be described with reference to Figures 41 and 45. 

As shown in Figure 2, the call manager system of 
the nMCI Interact System further includes one or more 
web servers 1132 for providing browser -based customer 

35 connections from the World Wide Web (WWW or Web) . The 
call manager web server 1132 passes the customer 
connections through to the SCP host 1110 via the CMIDS 
1140, and thus delivers the call manager functionality 
to the call manager webstation client 1030 via a 

40 standard web browser and the Internet. The web server 
24 is accessed by customers using the public Internet 
by directing a web browser 20 running on the call 
manager webstation to point to a call manager Uniform 
Resource Locator (URL) . 

45 The call manager webstation 113 0 may be any 

hardware/software platform connected to the public 
Internet and running a supported web browser. The 
call manager webstation 1120 is typically owned and 
maintained by the customer. The call manager 

50 webstation 1130 includes a web-based graphical user 
interface (GUI) application which enables the 
customers to define their call terminations, and 
provision routing rules and associated tabular data to 
control routing by the SCP host 1110. The GUI 

55 application also presents alarms and near real time 
graphical displays of peg counts and ACD-based 
statistics. The application also provides reports and 
data extracts of historical data, including call 
detail records (CDRs) , ACD-based statistic, and peg 

60 counts. In addition, user- id administration functions 



WO 99/15979 



PCT/US98/20170 



-135- 



including business hierarchy structures and function 
profiles may be performed via the call manager 
webstation' s web-based GUI application. 

In addition, the Nexus client workstation 1126 is 
5 included as an alternative client for the SCP host 

1110. The presence of the call manager webstation 
1130 does not preclude use of the Nexus client 
workstation 1126. The Nexus client workstation 1126 
typically runs a graphical user interface application 

10 for enabling the customer to define their call 

terminations, routing rules and to display the ACD and 
routing information m either tabular or graphical 
forms. The Nexus client workstation 1126 are directly 
connected to the SCP host 1110 typically via dedicated 

15 circuits to customer premise locations or through the 
enterprise backbone networks for the enterprise 
locations . 

Call Manager Webstation architecture 

20 Figure 41 illustrates call manager webstation 

component architecture showing interconnections among 
the components. In a preferred embodiment, the call 
manager webstation system includes three components of 
the call manager platform: client desktop systems, or 

25 a workstation, hereinafter referred also as the client 
webstations 1130 for delivering call manager functions 
through a standard web browser; a web server 113 2 for 
supporting secure access for internet or 
extranet/mtranet-based clients to call manager back- 

30 end and thus to SCP hosts; and call manager integrated 
data server (CMIDS) 1140, forming an integral part of 
the back-end call manager application and supporting 
access to SCP host systems. As shown in Figure 41, 
the client desktop systems 1130 with Internet 

35 connectivity have standard browsers executing Java 
applets, i.e., a client GUI application, downloaded 
from the call manager web server 1132. The web server 
1132 which is located in the above - described 
demilitarized zone (DMZ) 17 of the network MCI 

40 Interact system, include Java class files, but no 

storage of customer data to insure data security. The 
DMZ is generally bounded by two firewalls: an Internet 
firewall 25 (a) and an enterprise intranet firewall 
25 (b) . The call manager integrated data server 

45 (CMIDS) generally handles the business and data logic 

associated with the call manager functionality. Each 
of the above components will now be described in 
detail with reference to additional figures. 

As described above, the client webstation 1130 

50 provides a web-based graphical user interface (GUI) 
offering data management and data presentation 
features for the call manager system. The web -based 
front -end GUI is typically written using the Java 
programming language to insure platform independence. 

55 The client webstation 1130 typically includes a web 

browser with Java applets for the interface for 
providing access to the call manager webstation 
application from a standard web browser, e.g., 
Internet Explorer V4.01. In addition, the networkMCI 

60 Interact common objects are used for implementing many 
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f unctions needed for client/server communications 
protocols. The Java applets generally reside on the 
web servers 1132 and are dynamically downloaded to the 
client browsers (client webstations) 1130 when the 
5 Uniform Resource Locator (URL) for the call manager 
webstation client GUI application is accessed. 

The call manager webstation client GUI 
application of the system of the present invention is 
typically invoked by clicking a "call manager" icon 97 

10 from the networkMCI Interact home page 79b (Figure 

5 (b) ) . The customer is then presented with a toolbar 
for launching each of the call manager webstation 
application features as shown in Figure 49 at 11880. 
Moreover, on-line help is offered via hyper-text 

15 markup language (HTML) documents residing on the web 
servers 1132 . 

Each call manager webstation application feature 
may be accessed through an icon button in a tool bar 
11880 as shown in Figure 49. Moreover, each feature 

20 is brought up in a separate window frame, giving a 

consistent look and feel throughout the web 
environment. As shown in the example display of 
Figure 49, the main features offered include: user 
setup and administration, i.e., security functions at 

25 11882; business hierarchy setup; call by call 

application for rules writing and provisioning at 
11874, 1884; graphic data display at 1878; alarm 
manager at 1872; and reporting and data extracts at 
1876. A detailed description for each of feature will 

30 be provided with reference to Figure 4 8 below. 

For providing the above features, the client 
browser includes class objects making up the client 
interface code, in a first embodiment shown in Figure 
42. Specifically, the user interface classes 1134 

35 represent the mam GUI objects for performing a call 
manager specific functionality. Each of the classes, 
i.e., user and business hierarchy setup, call by call 
application, graphic data display, alarm manager, 
reporting extracts, and authentication/entitlements, 

40 performs the corresponding client- side functionality 
associated with the call manager features provided. 
The web server classes 63 8 provide the communication 
pass through to the back-end server. The 
communication classes (not shown) are employed between 

45 the client browser 1130 and the web server 1132 for 

requesting transactions and/or data sets from the web 
server 1132 . 

In the first embodiment, the communications from 
the client 20 and back-end CMIDS 1140 (Figure 41) via 

50 the web server 1132 are conducted using the common 

gateway interface (CGI) . Requests from the client are 
typically first targeted at a CGI program, which then 
relays the request to the appropriate proxy process. 
Results are returned from back-end processes to the 

55 requesting client in the same manner. Each 

transaction or data request may be executed as a 
separate process, to allow processing to continue from 
other applications within the call manager webstation 
system. 



WO 99/15979 



PCT/US98/20170 



- 137 - 



In a preferred embodiment, a Netscape, Server 
Application Program Interface (NSAPI) module may be 
used as an alternative to the CGI layer, the NSAPI 
module replacing the CGI -protocol communications layer 
5 between the client 20 and the web server 1132. The 

web server 1132 may be configured to pick up the NSAPI 
module and load on start-up. Java client code 1134 
(Figure 42) may be configure to refer to the NSAPI 
module. For example, the Java client may invoke a 

10 method to communicate directly with the NSAPI module 
that performs the same function as the CGI program. 
Using the NSAPI module enhances performance and 
messaging throughput. When the server 1132 recognizes 
requests for the NSAPI module, it invokes a particular 

15 function in the module which performs essentially the 
same function as the CGI program. For example, a 
middle tier transaction handler, typically a message 
manager (msgmgr) and residing with the web servers 
1132, may be modified to use the NSAPI instead of the 

20 HTTP CGI . The advantage of NSAPI over CGI is that a 
new process need not be created whenever a request 
comes in from the web client 20. 

In general, and as described above, the web 
server 1132 provides a communication pass -through 

25 between the web client GUI application 1130 and the 
back-end call manager integrated data server (CMIDS) 
1140 which may communicate with the SCP host. Figure 
43 illustrates one embodiment of the software 
architecture showing communications between the client 

30 20 and the web server 1132 and its components. The 
web server 1132 provides web-based call manager 
applications to web clients having a web browser on 
their client workstations 20. The web server 1132 
includes an HTTP service manager 1152 and a message 

35 manager 1156. The HTTP service manager 1152 generally 
handles requests from multiple clients 1130 to 
download web pages and Java applets for display within 
a browser. Web pages include hypertext markup 
language (HTML) files and Java applets 6 54 that are 

40 downloaded to the clients 20 and are executed within a 
browser by the Java applets. The HTTP service manager 
1152 also handles message transactions via the POST 
method defined by the hyper -text transfer protocol 
(HTTP) protocol. The HTTP service manager may be 

45 standard off-the-shelf World Wide Web server software, 

e.g., Netscape Enterprise Server. 

The message manager 1156 is typically a CGI 
program that is executed as a spawned process within 
the HTTP service manager 1152 when a message 

50 transaction is received from the client via the POST 

method sent to the HTTPS port (443) 1150. The HTTP 
service manager 1152 spawns a process to run an t 
instance of the message manager 1156 each time it 
receives a message transaction from the client. 

55 Alternatively, the message manager 1156 may be 

implemented as a function in the NSAPI module as 
described above. The HTTP service manager 1152 then 
invokes the message function in the NSAPI module. 
Both input and output streams are created by the 

60 message manager 1156 to receive message data from the 
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client 20 and to reply back to the client 20. The 
message manager 1156 is generally responsible for the 
following: 1) accepting new user login by allocating a 
new session key for a newly created session; 2) 
5 attaching a dispatcher and proxy header to the web 
client's message and forwarding the message to the 
proxy server 1170; and receiving a SCP host response 
message from the proxy server 117 0 and re- wrapping 
this message with dispatcher and proxy header and 

10 sending this formatted message to the web client 20. 

Message transactions are sent to the proxy server 117 0 
over a new connection by opening a new TCP socket to 
the proxy server 1170 while the original socket from 
the browser is blocking, waiting for a response from 

15 the web server 1132. 

Typically, communications to and from the client 
20 take place over hyper- text transfer protocol secure 
(HTTPS) , which uses hyper-text transfer protocol 
(HTTP) over a secure socket layer (SSL) encrypted 

20 channel. Applications may include web pages in the 

form of hyper -text markup language (HTML) files and 
Java applets 654 that are stored on the web server 
1132. The HTTP service manager 1152 downloads the 
HTML files and Java applets 654 to the client 1130 

25 upon request via the HTTPS port 1150, typically 

configured to port number 443. Each transaction from 
a client 20 is sent to the web server 1132 in the form 
of a logical message that has been encrypted. The web 
server 1132 decrypts the message and wraps the message 

30 with the user's information, including environment 
variables and a server -generated session identifier 
(id) . The message is then encrypted and forwarded to 
the CMID 1140, or alternately, as will be described 
below, to the proxy server component of the CMID 1140. 

35 The message transactions created by the client 2 0 

may be transmitted over HTTPS using the POST method 
defined within the HTTP protocol. Using the POST 
method, a specified CGI program and more specifically, 
an invoked message manager runs as a thread in the 

40 HTTP service manager 1152. Message data is passed to 
the message manager 1156 by opening an input stream 
and an output stream within the thread. As described 
previously, the HTTP service manager 1152 spawns a 
message manager process 1156 for each message 

45 transaction sent to web server 1132. Each message 
transaction is a single request from the client 20 
that is answered by a single reply from the web server 
1132 . 

The web server 1132 also includes a session 
50 manager 1158 and a session table 25(a) for providing 
session management functions including the 
authentication of various web requests. A session is 
defined as the amount of time between which a client 
20 logs onto the web server 1132 and when the client 
55 logs off. During a session, a client 20 may submit 

many message transactions to the web server 1132^ 
State data for each session is stored in the session 
table 25 (a) . Session entries are deleted from the 
session table 25(a) when a user logs off or when a 
60 session is aged. Each message transaction received by 
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the web server 1132 is associated with an active 
session. If a session no longer exists for a 
particular transaction, the message transaction is 
returned to the client 2 0 as rejected. The 
5 application then may prompt the user to login again. 

Generally, the session table 1160 is a table that 
has state information on-all current client sessions 
that are active on the web server 1132. When a client 
logs onto the web server 1132 and is authenticated, 
10 the client is provided a "session id" which is a 

unique server - generated key. The client holds this 
and returns it to the server as part of subsequent 
message transaction. The session table 1160 maintains 
a "session key table" which maps these keys to the 
15 associated session. The session table also includes a 
time stamp for each client session. A client 
session's time stamp is updated each time a message 
transaction containing the session id for the session 
is received. A session is aged if no message 
20 transactions belonging to the session are seen after a 

given amount of time. If so, the session, with its 
entry deleted from the session table 1160, is logged 
off from the SCP host 1110. 

The session manager 1158 is generally responsible 
25 for monitoring all current client sessions. The 

session manager 1158 typically monitors the sessions 
by accessing the session table 1160 and checking the 
current time stamp values for each current session. 
If the time stamp value shows that a session has aged, 
30 the session entry for the aged session is cleared from 
the session table 1160. Clearing the session entry 
forces any further message transactions associated 
with the session identifier to be rejected, requiring 
the user to restart the session. 
35 For communications to and from the web client 2 0 

and the back-end, the middle- tier web server 1132 
supports three types of transport mechanism which are 
provided by the networkMCI Interact platform: 
synchronous, asynchronous, and bulk transfer, as 
40 described herein. Particularly, the Synchronous 

transaction type typically has a single TCP connection 
which is kept open until a full message reply has been 
retrieved. The Asynchronous transaction type is 
typically used for handling message transactions 
45 requiring a long delay in the back-end server 

response. A server process handling the message 
transaction responds back to the web client 2 0 
immediately with a unique transaction identifier and 
then closes the connection. The web client 2 0 may 
50 then poll the web server 1132 using the transaction 
identifier to determine when the original message 
transaction has completed. The bulk transfer type of 
transport mechanism is typically used for large data 
transfers which may be virtually unlimited in size. 
55 In the embodiment shown in Figure 43, the web 

server 1132 includes a proxy server 1170 and a 
database 1172, e.g., Informix database. In this 
embodiment, the web server 1132 includes capability to 
communicate directly to the SCP host, bypassing the 
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CMIDS 114 0, by having the proxy server reside 
physically in the web server. 

Figure 44 illustrates an example of call manager 
webstation application physical architecture when one 
5 or more call manager web servers 1132 bypass the CMIDS 

component of the present invention. As shown, the 
call manager web servers~1132 directly communicate the 
MML messages, i.e., translated client requests, to 
the Nexus SCP host 1110. In addition, in this 

10 embodiment, it is the SCP host 1110 which receives ACD 
statistics, alarms and other information from the IR 
host 1112, and communicates the information to the web 
servers 1132. The SCP host 1110 serves as the routing 
engine through which customer provision routing rules 

15 and associated tables or list, view alarms, route peg 
counts, etc. It houses the applications used by 
customers to manipulate the features of their 
automated call distributor (ACD) . Figure 44 also 
shows the call manager web client 20 as being 

20 authenticated via the networkMCI Interact platform and 
the StarOE authentication and entitlement system 29 as 
described herein, i.e., the networkMCI Interact 
platform validates the password and authenticates with 
the StarOE system 631, verifying that a customer's 

25 profile allows access to the call manager webstation 
application. Upon valid authentication, the call 
manager webstation application session may begin with 
the client webstation communicating with the call 
manager web servers 1132 for providing the various 

30 functionalities . 

In another embodiment, the data § processing 
components for business and data logic, i.e., the 
proxy server and the database, resides with the CMIDS 
1140, thereby reducing the functions of the web server 

35 1132 to an application server providing primarily 

state and session management. Porting the proxy 
server 1170 over to the CMIDS 1140 may be easily 
performed. The transaction handler in the middle 
tier, i.e., the message manager 1156 still passes 

40 messages between the Web client 20 and the CMIDS 1140. 

The only change needed is that the transaction handler 
connects to the proxy residing on the CMIDS 1140, as 
opposed to the proxy 1170 on the web server 1132. 

The proxy server 1170 generally processes message 

45 transactions from the client 20 and is multithreaded 

to handle multiple message transactions 
simultaneously. The proxy server 117 0 is designed to 
process one type of message transaction or a set of 
message transactions. In this embodiment, routing of 

50 the messages to and from the proxy is handled by the 
message manager 1156. The proxy server 1170 also 
interacts with a database 1172, e.g., Informix, to 
pass back information to be displayed by the client 
20. The proxy server opens a connection to the SCP 

55 host 1110 to retrieve information about routing plans 
or report statistics by sending the SCP "man machine 
language" protocol (MML) commands. Upon retrieval, 
the proxy server 1170 formats a response message which 
is sent back to the client webstation 113 0 so that it 

60 is displayed on the current web page. As the message 
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reply is sent back to the client 20, each ^thread 
created by the proxy server 1170 is completed. It 
should be noted that the proxy server 117 0 need not 
reside in the web servers 1132. Instead, as will be 
5 described with reference to Figure 45, the proxy 

server 1170 may reside in the CMIDS 1140, the back-end 
server component. 

The database 1172 generally maintains information 
needed to translate the messages to and from the SCP 

10 host 1110. A message translation program written in 
4GL accesses the database 1172 when a message 
transaction is received. The program translates the 
message and sends the message to the SCP host 1110 for 
processing. After the message has been processed, the 

15 program translates the response and sends it back to 
the message manager 1156. The proxy server 1170 
typically invokes an instance of the translation 
program for each message transaction it receives and 
processes. As noted above with reference to the proxy 

20 server, the database 1172 may also alternately reside 

in the CMIDS with the proxy server. 

In the first embodiment, a data server, i.e., the 
CMIDS, is included. In this embodiment, much of the 
functions of the proxy server are performed within the 

25 data server. More specifically, the proxy server 1170 
and the database 1172 may be ported over to the CMIDS 
1140. The web server 1172 communicates to the proxy 
in the CMIDS 114 0 which then communicates with the SCP 
host. The call manager integrated data server (CMIDS) 

30 1140 generally services web requests for the 

webstation application and serves as a front -end for 
the SCP host 1110. Referring back to Figure 41, the 
CMIDS 114 0, in addition, provides data storage and 
management for data resident on the SCP host 1110, the 

35 IR host 1112, and/or other servers. The CMIDS 1140 
also provides pass through connectivity for rules 
writing and other provisioning from the client 
webstation 1130 to the SCP host 1110. The CMIDS 
includes databases 1142a- c and provides an interface 

40 1162 to the call manager SCP host 1110 for rules 

writing and list management. CMIDS databases 1142a- c 
are extracted or replicated from the SCP host 1110 
and/or the IR host 1112. The SCP host 1110 services 
are typically requested and satisfied through a 

45 protocol known as "man machine language" (MML) 

commands. The CMIDS 1140 utilizes MML as well as 
other interface mechanisms supported by the SCP host 
1110. The call manager integrated data server (CMIDS) 
1140 physically resides on hardware located behind the 

50 intranet firewall 25(b) as shown. 

The proxy server 1170 and the database 1172 which 
were described with reference to the web server 1132, 
may reside in the CMIDS 1140. In addition, the CMIDS 
114 0 may also include a session manager and associated 

55 session table for managing host sessions. As 

described above, the proxy server 117 0 generally 
handles webstation client 20 requests passed from the 
web servers 1132 by accepting message transactions 
from the webstation client 20 via the web servers 

60 1132, maintains logging information, sends the request 
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to a session manager, and receives data frpm back-end 
and forwards to the web servers 1132. In addition the 
proxy server 1170 may accept messages originating from 
the Nexus client workstations (112 6 at Figure 40), and 
5 perform user logon validations for the Nexus client 

workstation 1126. The Nexus client transactions, with 
the exception of the user logons, are passed directly 
to the SCP host 1110 for processing via a Nexus port 
manager (not shown) . 
10 The session manager 1158, residing in the CMIDS 

1140, receives data from the proxy server 1170. The 
session manager 1158 updates the sessions table 1160, 
validates that the user has proper privilege to 
perform the task and determines whether the 
15 transaction originated from a webstation 1130 or a 

Nexus client 1126. The user validation function may 
be performed for the webstation client 20 also, in 
addition to a validation conducted by the networkMCI 
Interact StarOE authentication and entitlement system 
20 during the session logon. 

CMIDS 1140 also may include a Nexus host 
formatter, a CMIDS transaction manager, and a Nexus 
port manager. The session manager 115 8 typically 
passes a transaction request received from the web 
25 server 1132 to either the Nexus host formatter, or the 
CMID transaction manager. The Nexus host formatter 
module services transactions requiring SCP host 
services to fulfill the request. If the transaction 
originated from a Nexus client workstation 1126, the 
30 MML command message is adjusted to use a selected 

generic id for access to the SCP host 1110. If the 
transaction originated from a webstation client 20, 
the request is translated to the correct MML format. 
When the message is prepared, it is then sent to the 
35 Nexus host port manager component. 

The CMIDS transaction manager module services 
transactions that do not require the SCP host 1110, 
i.e., the types of client request which may be 
serviced locally on CMIDS, including: obtaining NEMS 
40 alarm information, obtaining GDD information, and 
processing of user security. When the local 
processing is complete, results are sent back to the 
proxy server 117 0 component. 

The Nexus port manager component of the CMIDS 
45 manages pools of session with one or more SCP hosts 
1110. The Nexus port manager logs onto each session 
in a pool using a "generic" user id. Using a 
"generic" user id enables each session to access an 
individual user's data without having to log each user 
50 onto the SCP host 1110. MML commands for a particular 
user are sent to a SCP host using any available 
session in the pool of "generic" session. After an 
MML command is sent and a response is received, the 
session is returned to the session pool and freed for 
55 use by the succeeding transactions. A session pool is 
defined as a set of sessions connected to one 
particular SCP host 1110. Therefore, the Nexus port 
manager component of CMIDS 1140 supports multiple 
session pools for communicating with multiple SCP 
60 hosts 1110. 
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The Nexus port manager also maintains, state of 
each session in each pool. The Nexus port manager 
generates a keep- alive-message whenever a session is 
idle to keep the SCP host 1110 connection from being 
5 dropped. It a session in a pool has failed, the Nexus 
port manager will try to reestablish the session and 
add it back into the pool- when establishment is 
completed. The Nexus port manager determines the 
communication channel to use to access the SCP host 

10 1110 and keeps a number of connections open to the 

host 1110. Each message is sent to the SCP host 1110 
and the channel blocked until a response is received. 

Figure 45 is an example of a CMIDS conceptual 
model 1140 providing details of the CMIDS software 

15 components. The components perform specific 

functionalities of the back-end which will also be 
described with reference to Figure 46. The CMIDS 
software architecture includes proxy 1148, proxy, 
system administration, and inbox components applicable 

20 to the call manager webstation (CMWS) application. 

The CMWS proxy 1148 is generally a logical 
internal software entity which verifies application 
access and interfaces with host application. Depending 
on the application access chosen by the customer, 

25 either the networkMCI Interact dispatcher or the CMWS 
web server 1132 communicates client transactions to 
the CMWS proxy 114 8. The networkMCI Interact, as 
described herein, typically accepts the encrypted 
customer request from the networkMCI Interact web 

30 server cluster, and it interfaces with a CMWS proxy. 
The user account interface software component 1143 
generally maintains sessions with the SCP hosts and 
provides the functions of the Nexus port manager 
described above. The report handler process generally 

35 maintains databases 1142a- c and provides reporting 
facilities. The CMIDS back-end interface 1191 
supports a number interface mechanisms including MML 
and command line access to the Nexus SCP host, common 
alarm and logging services, and data retrieval from 

40 the IR host. 



The call manager webstation back-end 

As described generally above, the back-end is 
responsible for transmitting web client request to the 

45 SCP host and delivering the host reply information 
back to the web clients. For supporting the 
request /reply transmissions, the back-end system of 
the present invention generally includes three logical 
components: front-end interface (BFI), translate/data 

50 manager (TDM), and back-end to Nexus, i.e., SCP host 
interface (BNI ) . It should be noted that SCP host 
functionality is currently implemented on the Nexus, 
hence the acronym, BNI. However, other host systems 
are not precluded as having capability to support the 

55 SCP host functionality for the purposes of the call 
manager webstation system of the present invention. 

Figure 46 illustrates a back-end process flow 
1200 for the system of the present invention. A 
customer 1122 typically dials a toll-free number. As 
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an illustrative example, this toll-free number may be 
provided by a company having operators taking 
telephone orders. In addition, the company provides 
three trunk lines or destination identifiers going 
5 into its ACD. The company services a call centered 

media-based sales application, e.g., home shopping 
network through this ACD-which includes a toll-free 
number for customers to call. To handle calls to the 
home shopping network client, the company sets up an 

10 ACD path group called "HSN." This ACD path group 

includes the three trunk lines as member destinations 
and reports agent and call statistics from the total 
number of agents servicing home shopping network, 
regardless of the particular trunk lines. 

15 Accordingly, as shown at step 1241, when the 

customer 1122 dials the toll-free number, the call 
goes to the network through the switch. At step 1242, 
the call is passed from the switch to the DAP for 
translation. The DAP translates the toll-free number 

20 to a network number and maps it to an address readable 

by the RDG . NetCap 29 0 generally houses routing 
plans, destination labels, toll-free numbers, logical 
terminations, DAP-based details and trigger plans 
required for the call manager webstation system. Most 

25 of this data may be provisioned in NetCap 290 via the 
Toll Free Network Manager (TFNM) application service, 
as described herein. Seeing the trigger point and 
other DAP-based data provisioned from NetCap 29 0, the 
DAP passes the call to the RDG at step 1243. At step 

30 1244, call statistics are saved in DAP traffic 

statistics (DTS) for use in case of time-out or other 
failures. They are also stored within the IR host. 
At step 1245, the RDG, with its ability to communicate 
with the SCP host, passes the network number and 

35 associated address to the call -by- call (CxC) routing t 

application on the SCP host. Based on instructions in 
the rule set defined by the call manager webstation 
system customer, the CxC application selects the HSN 
ACD path group at step 1246. At step 1247, CxC t 

40 application then selects the individual destination 

identifier within the ACD path based on the specified 
distribution method which may be either even/ "round 
robin" or directed/percentage distribution. At step 
1248, the call is routed back through the RDG to the 

45 DAP. Then at step 1249, the DAP routes the call to 
the ACD via the specified destination id or trunk. 
Specifically, referring back to the above illustrated 
example, calls received on Thursdays between 5:00 and 
7:00 GMT may be set to be routed to Orlando, and 

50 accordingly the destination id is Orlando Central. 

The CxC routing application returns destination id 
"Orlando Central" to the network, which routes the 
call to the ACD via the Orlando Central destination id 
or trunk. 

55 

Call manager client GUI application implementation 

As in the other nMCI Internet network management 
client applications, the call manager client 
application (CMApp) is preferably derived from the 
60 (common object) COApp class and may be launched by a 
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backplane object that is typically derived, from the 
COBackPlane class, including the networkMCI Interact 
backplane (Figure 3) . 

In one embodiment of the present invention, the 
5 call manager client application is launched in a 

separate browser window from the one within which the 
networkMCI Interact backplane is running. For 
example, after validating that a customer's profile 
allows access to the call manager application, and 

10 after a customer clicks the call manager icon 97 on 
the networkMCI Interact home page (Figure 5 (b) ) , the 
networkMCI Interact backplane creates a separate 
browser window and populates the call manager 
webstation URL. The call manager webstation web 

15 server then downloads the call manager client 

application for execution within the new browser 
window. The call manager client application 
downloaded from the server includes a CMBackPlane 
class which is an applet derived and inherits from the 

20 COBackPlane class. The CMBackPlane is launched with 
the call manager webstation web page and provides 
backplane functionalities within the context of the 
call manager webstation application. The call manager 
client application also includes a aFeature class from 

25 which the CMFeature is derived. The CMFeature 

typically is invoked by the CMApp and provides an 
application specific functionality within the call 
manager application such as reporting, alarm 
management (NEM) , graphical data display (GDD) , and 

30 call by call application (CxC) . 

Upon the call manager application launch and 
initialization, the main toolbar sets its icon. For 
example, the browser starts the backplane applet which 
launches the CMApp by calling its imt method. The 

35 CMApp calls setlcon method for setting up an icon for 
the main toolbar. The main toolbar may be implemented 
using a view of a model in a MVC paradigm described 
above. When a user presses a button on the main 
toolbar to launch a feature, e.g., NEMS, Rules, 

40 Provisioning, etc., the CMAppView derived from the 
theMainToolbar class creates/activates the selected 
feature and initializes it. When the CMFeature is 
instantiated or started, it invokes a setlcon method 
to create a frame, the CMFeatureFrame , in which to run 

45 the selected feature. 



Call manager webstation client application features 

As described above, the call manager webstation 
application allows authorized customers to manage 

50 their ACD data networks via a web -based interface. 
Specifically, customers are enabled to provision 
hierarchies for their business; control all routing of 
their toll-free traffic; create, modify or delete 
agent pools; manipulate capacity tables; and define 

55 quota schemes, value lists and schedule tables. 

In the manner as described herein, a customer at 
a client webstation 20 having Internet connectivity 
and a web browser, and after logon, is presented with 
the networkMCI Interact home page [Figure 5 (b) ] 
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downloaded from the web server. With downloading and 
presenting of the home page, the web browser at the 
webstation 20, deploys a backplane applet via which 
the call manager GUI client application is invoked. 
5 The backplane requests a list of authorized 

applications from the StarOE authentication and 
entitlement system for the networkMCI Interact 
platform and a select list of applications which may 
include the call manager webstation application, is 

10 enabled on the home page according to the customer 

specific entitlements. The call manager webstation 
application is then accessed from the home page 
[Figure 5 (b) ] . 

The customer may be presented with a call manager 

15 webstation application logon dialog box, in which the 
customer enters the call manager webstation logon name 
and password. In addition, the customer may be 
presented with a change password dialog. This dialog 
implements a password expiration design feature, which 

20 due to security reasons, the customer must change 

after a predetermined period of time. In addition, 
multiple hosts may be handled through the web client 
front-end and translation processing at the back-end. 
The front -end client application sends the "get -nexus - 

25 host" command to retrieve a list of SCP host names. 

The host information is stored at the back-end with 
the Informix database and, typically an SQL routine 
retrieves the available Nexus SCP host machines. The 
proxy residing at the back-end returns a list of the 

30 available Nexus SCP host machines to the front -end web 
GUI client application. The proxy generally maintains 
a "hosts' 7 list having SCP host names and their IP 
addresses. Maintaining the list of host names on the 
proxy allows for easy modification of host names and 

35 IP addresses with no impact to the client code. 

When the front -end web GUI client application 
receives the list, a list of host names may be 
displayed in a drop- down list for the customer to 
select, or the customer may be prompted for the Nexus 

40 SCP host machine desired. The selected host name is 
sent along with a login transaction having user 
name/password to the back-end, when the customer 
clicks a "login" button from the login dialog. The 
"establish- session" command is then sent to the back- 

45 end where the proxy may open a connection to that 
host. The proxy maps the SCP host name to the 
appropriate IP address and forwards the user login 
request to the host. The SCP host id selected at 
login is populated in the toolbar (Figure 48 at 1880) 

50 at the client webstation. 

An application - level process flow 1250 for the 
CMWS system is now presented in view of Figure 47. 
After an entered login name is validated by StarOE and 
user entitlements ascertained, the call manager 

55 webstation applet is downloaded to the customer 

webstation 113 0, and as indicated at step 1254, the 
customer is presented with the screen 1870 shown in 
Figure 48 through which the customer may perform the 
call manager features of the present invention 

60 provided. These features include: manipulating user 
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and business hierarchy by querying, creating, or 
editing user id records as shown at steps 1256 and 
1258; managing routing schemes via the call by call 
application as shown at steps 1260 and 1262a-k; 
5 invoking alarm manager at step 12 64 and 1266 to view 

problems occurring across the call manager components, 
such as loss of connectivity, failure of ACD data 
collection, system failures, and application 
abnormalities; reporting and data extracts at steps 

10 1268, 1270 for printing, displaying and managing ACD 

statistics, alarm history, database usage, peg 
counter, and system performance; and graphic data 
display at steps 1272, 1274 for viewing histograms and 
charts of ACD and peg-count statistics. 

15 More specifically, by selecting the option at 

step 1256, to manage a user and business hierarchy, 
via, e.g., the security button 1882 (Figure 48) from 
the toolbar 1880 (Figure 48) , a customer may search 
for a user id and, with appropriate privileges, create 

20 or edit a user id for a business level below their 

own. Through this option the customer may also access 
reporting visibility to all data items belonging to 
the customer and any business level below their own. 
In addition, the customer may assign a read, 

25 read/write, or no access privileges to each function 
in the user id profile. Moreover, the customers may 
administer and modify limits on the number of entities 
that a business unit may own in the provisioning 
database . 

30 By selecting the call by call application at step 

1260, for example, by clicking on an icon labeled 
"Provisioning" (Figure 48 at 1874) on the call manager 
web station tool bar displayed on the screen 1870 in 
Figure 48, the customer may perform business hierarchy 

35 provisioning as shown at step 12 62a. The customer may 
select the option at step 1262b and perform load- 
balancing by determining the degree of "busy-ness" by 
tracking the average call handling time, the number of 
agents, and the number of calls routed to each 

40 destination. At steps 1262c and 1262e, the custcpmer 
is enabled to provision capacity tables for providing 
a default staffing allocation for use by the load 
balancing algorithm. With the CxC option and shown at 
step 1262d, the customer may also provision basic 

45 destination ids representing a single call termination 
on the network which may be a single telephone 
instrument or a line termination into a PBX. 
Destination ids with ACD feeds, which may represent a 
single call termination into an ACD, may also be 

50 provisioned. Provisioning of ACD path groups 

representing a set of destination ids that terminate 
on the same physical ACD and share the same 
statistical data feed is also enabled. Provisioning 
of Destination Groups representing a set of logically 

55 related destination ids and/or ACD path groups is 

possible via the CxC option. Destination Groups are a 
convenience mechanism for writing rules that refer to 
multiple destinations without having to list each 
destination separately. In addition, the customer may 

60 provision distribution methods, e.g., even, which is a 
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round- robin selection of destination ids or directed, 
in which the calls are routed to destination ids based 
on a percentage allotted to each destination id. 

At step 1262f, quota customers to specify and 
5 maintain call routing quotas for destinations. At 
step 1262g, the customer is enabled to provision 
called numbers. For example, the customer creates a 
rule set associated with the called number. The rule 
set typically determines the location of the caller 

10 and selects the appropriate destination number for the 
nearest warehouse. At step 1262h, the customer may 
provision value lists which are sets of related 
numeric values. They are typically used in rule sets 
to test the attributes of an incoming call to 

15 determine a characteristic of the call or caller. An 
attribute of the call (such as the ANI) is tested 
against a value list. If the value of the call 
attribute matches an entry in the value list, then 
other rules are executed based on this logical 

20 condition. This feature is highly useful for non- 
English- speaking callers. At step 1262i, the customer 
may provision translation tables. The translation 
tables include a highly flexible mechanism for 
performing a table lookup and returning a value that 

25 corresponds with the search argument. At steps 1262 j 
and 1262k, the customers may maintain user variables 
such as setting up names for peg counters and rule 
variables and routing instructions. 

By selecting the alarm manager option at step 

30 1264, for example, by clicking on an icon labeled 
"NEMS" (Figure 48 at 1872) on the call manager web 
station tool bar displayed on the screen 1870 in 
Figure 48, the customer may display various alarms for 
problems occurring across the call manager components. 

35 These components were described above. Typically, 

alarming is performed through the BMC patrol software 
agents with monitoring provided by the system 
operational support (SOS) organization, which monitors 
other components of the call manager platform. 

40 Patrol's "logwatch . cinf ig" allows setting up a file 

name and a selection string. Patrol agents typically 
monitor the file and pass alarms matching the 
selection string to the web clients. For logging 
application level alarms, a UNIX syslog facility is 

45 used. A set of "send-alarm functions" interfaced 

between the application processes and syslog daemon is 
added to a common utility library. Through the send- 
alarm function the call manager application processes 
send the alarm messages to the same log file with 

50 different levels of severity. The alarms with high 
level of severity is generally monitored by system 
operational support (SOS) organization through BMC 
patrol software. Each alarm message typically 
includes a process name, an alarm number, and a 

55 severity level. A typical alarm message looks like: 
"Apr 8 17:23:31 cmjwstest Process Name [Process 
PID] : [L0G„Alert Number] can't set up a connection to 
XXX Nexus at Line 65 File proxy." The alert number 
then may be used to determine possible solutions. 
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Ref erring back to Figure 47, selecting the 
reporting and data extracts option at step 1268, for 
example, by clicking on an icon labeled "Reporting" 
(Figure 48 at 1876) on the call manager web station 
5 tool bar displayed on the screen 1870 in Figure 48, 
enables the customer to obtain reports of ACD 
statistics, alarm history, database usage, CDR 
extracts, Peg counters, and system performance. Each 
of these reports may be generated on-line or by a 

10 print function within the application. The ACD 

statistics are monitored in live, near- real - time by 
the SCP Host application. A load -balancing algorithm 
uses ACD statistics to determine the "busy-ness" of a 
destination. When an ACD Path Group is selected as 

15 the least busy location by the load-balancing 

algorithm, one of the individual destination ids 
within that ACD path group is picked to carry the 
call. The reports of alarm history permit the 
customer to view the status of alarms and events on 

20 the various hosts. An alarm or event may be an 

informational message sent autonomously from a host. 
Database usage reports generally provide information 
on users, typically by user id, accessing a 
workstation, SCP host, or CxC application. CDR 

25 extracts generally provide a database record of call 

detail record information about a called number 
translation query and its outcome of the routing 
translation process. Peg counters generally represent 
a series of accumulators that are available to the 

30 user for counting actions or situations encountered xn 
a rule set. System performance reports allow the 
customer at a workstation (webstation) to monitor 
capacity of the host and application components to 
foresee and prevent possible outages. 

35 Selecting the graphic data display option at step 

1272, for example, by clicking on an icon labeled 
"GDD" (Figure 48 at 1878) on the call manager web 
station tool bar displayed on the screen 1870, enables 
the customer to obtain and view histogram, chart, and 

40 line graph displays of ACD-based statistics and 
routing peg counts, which may be refreshed as 
frequently as once per minute. 

Rules writing, testing, debugging application features 

45 The rules feature (Figure 48 at 1884) allows 

users to write rules for routing of toll free calls. 
Rules may load balance based on call center capacity 
and route based on automatic number identification 
(AND, caller entered digits (CED) , or quotas. Via 

50 this feature, users may also test, install, unmstall, 
and swap rules as shown at Figure 48. The bottom half 
of screen 1870 in Figure 48 displays a typical rules 
writing/editing template. The users may build rules 
on the rules construction area 1882 by including 

55 statements selected from the constructs list box and 
the statements list box 1884. The users may also 
select various options 1886 available for the selected 
construct or statement for building the rule. 

For enabling a rule writer to test a rule set, 

60 the rules feature provides a rules debugger/ tester 
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f unctionality which runs a rule set against a set of 
test data, i.e., call context, simulating call 
scenarios in which to test a rule set logic. This 
optional facility allows rule writers to check if 
5 their rule set exhibits the expected behavior, for 
example, before installing the rule set on the 
network. Moreover, because this test feature is 
purely optional, a rule writer need not run the rule 
testing functionality before the rule is installed. 

10 When a customer, e.g., a rule writer, selects the 

debugger/tester feature option, a rules testing dialog 
appears. Via this dialog, a user may define a call 
context parameters for simulating call scenarios in 
which to test a rule set logic. The basic call 

15 context includes called- number , ANI , CED, carrier, 

date and time of the call. Optionally, the user may 
also modify the different parameters of destinations 
and quotas that may affect the load balancing. 

In addition, an option to allow the database to 

20 be updated during the simulation is also provided. 
During the testing process, the customer may step 
through the simulation one line at a time or choose a 
"Run" command to run through the entire call all at 
once. Furthermore, during the simulation, the t 

25 customer may select from various view tabs to view, 
including, a log view, a destination status view, a 
destination details view, a CDR view and a user 
variable view. 

For executing the testing process, the 

30 debugger/tester uses the MML interface to Nexus, i.e., 
the debugger/ tester formulates the user actions to one 
or more MML commands and sends the translated command 
to the SCP host. The SCP host typically stores the 
state of testing (including the different views of the 

35 log) , and manages the test execution. 

System status display 

Typically, a system status display 1850 shown in 
Figure 49, is opened by selecting "System Status 

40 Display" from the security button on the main toolbar 
(Figure 48 at 1882). The dialog is non-modal having a 
top half having a dialog 1852 including general 
information about the system, and, a bottom half 
including a combination box 1854 that allows the user 

45 to select between the different options described 

above, i.e: application status, ACD gateway status, 
partner links status, signaling network links status, 
and webstation session links status. Selecting an 
option displays a list including information relevant 

50 to that option. As shown at 1854, selection the 
application status displays information including 
application names 1856, instance numbers 1858, desired 
states 970, actual states 1862, release numbers 1864 
and TPS 1866. Similarly, selecting the ACD gateway 

55 status option displays information including gateway 

names, gateway states, gateway link states, collector 
link states, and dates/times of last change. 
Selecting the partner links status option displays 
host names, states, link states, sync states 
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information. Likewise the signaling network links 
status option displays information which includes 
linkset names, link names, states, dates/times of last 
change, and adjacent point codes. Selecting the 
5 WebStation session links status option displays 

information such as workstation instance numbers, 
locations, states, user -ids, and dates/times of last 
change . 

When a message prompting user readiness is 
10 received by the host, the host sends system status 
messages on a regular interval . The length of the 
interval may vary anywhere from every second to every 
minute. The system status display messages are 
automatically sent from the SCP host, once the 
15 messages are turned on. The backend typically stores 
this type of message received from the SCP host until 
the client queries for it. A unique set of data is 
stored for each user currently performing a system 
status display. Subsequent messages received from the 
20 SCP host typically overwrite previous data. 

The host administration functions 

A user may select to perform host administrations 
by selecting the appropriate icon from the main tool 

25 bar (Figure 48) . In response, a pull -down menu from 
is presented with options including: a backup option 
for backing up server database to a user - selectable 
back-up medium, e.g., tape or a disk; an ACD gateway 
administration option for providing users with the 

30 ability to view, create, delete and edit ACD gateways; 
an ACD collector administration option for providing 
the user with the ability to view, create, delete and 
edit ACD collectors; a FMS gateway administration 
option for providing the ability to view, create, 

35 delete and edit FMS gateways; and FMS collector 

administration for providing the ability to view, 
create, delete and edit FMS collectors. 

When the ACD collector administration option is 
selected, a dialog 1870 shown in Figure 50 opens with 

40 a list of retrieved gateway types. Typically the 

client GUI application sends two messages to retrieve 
information needed to populate the dialog box 1870. A 
"rtrv- acd- type" is used to fill the gateway type combo 
box 1872. A "rtrv- acd- status" is sent to retrieve 

45 information 1874 on the selected gateway type. 

Clicking a row in the list 1874 of enables the delete 
button. Typing characters into the site collector 
name 1878 enables the Add button 1879. The FMS 
administration dialogs share the same dialog box with 

50 the above described ACD gateway and collector 

administration functionalities. The same messages, 
i.e., the "rtrv- acd- type" , and the "rtrv - acd - status" , 
are sent to the back-end but with different parameter 
types, e.g., "FSM" or "ACD." 

55 

Company branding 

The CMWS component of the nMCI Interact system 
supports a branding functionality which allows users 
to open the call manager webstation application in a 
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cornpany specific context. The CMBackPlane, class is 
derived from the COBacklane class, which is an applet, 
which inherits all of the applet attributes and 
methods. This branding feature may be equally used in 
5 the other applications of the present invention when 
the BackPlane class for that application is defined. 
The main URL for the branded application uses 
JavaScript, a client side scripting language, to 
render the html. The JavaScript, typically, directs 

10 the browser to retrieve a company brand. The browser 

then opens the application web page with the company 
web page specified in the query portion of the URL. 
Typically the appliction applet retrieves a company 
brand name by invoking a getParameter method (an 

15 applet method) , and sets the brand name in the 

application specific globals class by invoking a 
setBrand method. This feature of the present 
invention enables resellers of enterprise 
telecommunication services to brand those services and 

20 features as their own when providing them to a third 

party user or customer. This facilitates the adoption 
and resale of unused enterprise capacity through a 
reseller market. 



25 
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Language support 

The CMWS component of the nMCI Interact system 
additionally provides an internationalization feature, 
supporting local languages for text displays. This 
5 optional feature allows a user to open the call 

manager application in a language as set by the user. 
Subsequent texts and phrases are rendered m the 
language chosen. Typically, the call manager 
webstation application is opened with a default 

10 language as set by the operating system. The user is 
also given an option to select a language other than 
the default. A call manager applet typically 
determines the locale set for the operating system and 
launches the appropriate language version by including 

15 the locale as a parameter. For example, the parameter 
with a name "locale" may have one of the following 
values: "en_US" for English US, "en_CA" for English- 
Canada, and "fr_CA" for French Canada. The applet 
uses this value to set the locale for the system 

20 string and phrase resources. A CMResource class 

handles the general resources of character encoding, 
numeric formatting and date formatting. 



Online invoicing 

25 Another application of the suite of 

telecommunications network management applications is 
an online invoicing system, herein referred to as 
"ClientView, " which provides customers with the 
ability to view invoices and reports online, and 

30 offers a facility for printing and faxing documents. 
The online invoicing system takes information 
available from different billing systems and 
incorporates that information into its database for 
subsequent retrieval and presentation to a user 

35 according to user - specif ied requests. A general block 
diagram illustrating the online invoicing system 
architecture 13 00, integrated with the networkMCI 
Interact platform, is shown in Figure 51. Generally, 
as shown in Figure 51, the ClientView system 13 00 is 

40 integrated within the nMCI Interact system comprising: 
the user web browser 132 0 which employs a ClientView 
GUI 1330 for providing an interface to which a 
customer may request and view various billing invoices 
associated with the application services subscribed by 

45 the customer and provided by the networkMCI Interact 

system via a secure socket connection for presentation 
of invoice reports. For example, using the GUI client 
application 20, customers may drill down on their 
applicable invoices, typically accessing them via the 

50 given customer identifiers such as the corp id, bill 
payer, or mega account numbers. The invoice reports 
may also be available for various application services 
including toll free, Frame Relay, and ATM; StarWRS 
client -side report viewer and requestor processes 2 00 

55 which provides the support for generating and 

presenting reports relating to the conditions of the 
customer's dedicated voice and data networks as 
described herein; a corresponding server side 
reporting component having the above described inbox, 

60 report scheduler and report manager components, in 
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addition to alarm and report viewer and requestor 
components implementing Java applets having viewer 
classes that enable the downloading and display of 
reports generated from ClientView server processes 
5 1350. 

Also shown as part of the online invoicing 
invoice viewing system architecture 1300 of Figure 51 
is the Web server/dispatcher component 1335 which 
provides for the transport between the Web browser and 

10 an online invoicing proxy interface 1340 including all 
secure communications and encryption. Thus, customer 
requests and server responses may be communicated from 
the user browser 1320 to the online invoicing server 
1350 in a secure manner. Specifically, the 

15 dispatcher 1335 forwards user requests, such as "get 
index" message for retrieving a list of documents 
available for viewing by a customer, to the online 
invoicing server 1350 process that employs an 
integrated proxy application 134 0 for receiving and 

20 interpreting the user messages and performing the 

online invoicing functionality. This proxy capability 
includes a multithreaded engine enabling multiple, 
simultaneously executing sessions supporting 
anticipated user load. The interface between the 

25 dispatcher server 1335 and the online invoicing server 
1350 is also message -based, employing, e.g., TCP/IP 
socket transport, and, as will be described, a 
messaging protocol that is defined and which includes 
a generic message header followed by proxy- specif ic 

30 data. The same process of messaging scheme is 

employed in the other direction. That is, the online 
invoicing proxy 134 0 sends the generic header, 
followed by the proxy - specif ic response back to the 
dispatch server 13 3 5 for communications over the 

35 firewall and back to the user browser 20. 

The online invoicing proxy 1340 uses the 
networkMCI Interact platform's "template proxy" as an 
implementation of the listener/slave portion of the 
proxy. The proxy 134 0 passively listens on a 

40 previously defined port number and forks a process on 
an interrupt basis, after which the parent proxy 
continues to listen for other request. The forked 
process is generally dedicated to handling the 
detected requests. The forked process detects a 

45 transaction type from the proxy protocol header. The 
transaction types generally include synchronous, 
asynchronous, and bulk transfer, as described above. 
The proxy 1340 then calls a "back-end" function whose 
function is dependent on the transaction type 

50 detected. The back-end functions typically provide 
individual services for which the application is 
responsible . 

For example, if the transaction type for a 
detected request is of "synch" type, the forked 

55 process executes the synch back-end function and 

passes the request as an argument. The synch back-end 
function generally passes the request to a CICS task 
on the online invoicing server and waits for a 
response. More specifically, the synch function first 

60 establishes a CICS task via a direct TCP/IP socket 
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connection to the CICS TCP/IP interface service. The 
synch function then waits for a response indicating 
whether a connection was successfully established or 
an error occurred. If an error is occurred, an error 
5 response from the CICS task is returned to the synch 
function, which then terminates appropriately. 

If a connection to the CICS task is successfully 
established, the request is sent to the task and the 
synch function waits on a response. The response is 

10 generally preceded with a preamble block, indicating 
the status of request and the number of bytes to 
follow. The preamble block may include an error code, 
indicating error conditions that may have occurred 
during the CICS task processing. Certain error 

15 indications may prompt the synch function to terminate 
the CICS task connection, and also to exit the synch 
function . 

If the preamble block indicates that the request 
was successfully processed, the preamble block is 

20 returned, and the byte count specified in the preamble 

block is piped from the CICS task, to the requesting 
process, and typically all the way back to the client 
GUI application. Upon completion of piping the data, 
the synch function disconnects the CICS task and 

25 exits. The forked process which called the synch 
function also terminates itself by exiting. 

In the preferred embodiment, the online invoicing 
server 13 50 stores documents from various billing 
systems and performs the various database queries and 

30 function calls in response to requests received from 

the customer via the online invoicing proxy 1340. 
Particularly, the online invoicing server 1350 is 
responsible for tasks including data collection, 
calculation, storage, and report generation. A more 

35 detailed description of the server 1350 is provided 
with reference to Figures 55 and 56. 

During its operation, the online invoicing server 
13 5 0 supports communications with the StarOE server 3 9 
which provides for authentication of users, supplying 

40 of entitlement information, and enabling order entry 
for the various online invoicing invoice viewing 
services order entry functions including functionality 
necessary to manage (create, update, delete) online 
invoicing users, and feed the appropriate order entry 

45 information to the online invoicing server 1350 in 

order to properly associate the appropriate online 
invoicing functionality and data to the right customer 
once given admission to the online invoicing invoice 
viewing service. 

50 As described previously, order entry for the 

networkMCI Interact browser and all applications on 
networkMCI may be made through the networkMCI StarOE 
order entry system. The online invoicing application 
service may be ordered for all business markets 

55 customers. For example, a user may select to have 

online invoicing invoices for a given enterprise, 
corp, bill payer, and/or mega account number. These 
include all NCBS, Toll Free, PLBS, and Mega invoices. 
In addition, selections may include invoice images for 
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MCI CVNS-ROW, MCI CVNS -Mexico, MCI CVNS - Canada as well 
as Stentor Advantage Vnet/CVNS invoice images. 

In the preferred embodiment, a messaging 
interface is utilized between the StarOE 39 and the 
5 online invoicing server 1350 for communications means. 

The online invoicing server 1350, typically functions 
as a client and receives - " authentication information, 
billing ids, and level of service information, which 
may also be supplied in response to the launch of the 

10 online invoicing GUI client application 1330. For 

example, when online invoicing client application 1330 
is launched from the home page [Figure 5 (b) ] , a 
customer identifier such as the userid and the 
applicable corp ids and mega account numbers may be 

15 retrieved by the order entry system administration 

server, StarOE 39, and passed to the online invoicing 
server. The online invoicing server then makes the 
necessary association to individual bill payers that 
the user is authorized to view. The view of invoices 

20 may include a particular portion of the invoice as 
well as the entire invoice. 

The online invoicing server 1350 also may 
interact with the StarWRS inbox server 270 by storing 
the news information regarding the online invoicing 

25 service, in addition to the event notifications, and 
report data from the networkMCI Interact application 
services . 

In addition, the invoice files saved on the inbox 
may be retrieved and viewed using the report requestor 

30 212 and the report viewer 215 components of StarWRS 

200 (Figure 10) residing in the user browser 20. Via 
the report requestor, the customer may request 
tailored reports regarding the invoice files and view 
or print the customized invoice reports displayed by 

35 the report viewer as described herein. 

An application- level process flow 1360 for the 
ClientView system is now presented in view of Figure 
52. After successful logon and entitlement 
determination (by StarOE server) , and upon selection 

40 of the online invoice (ClientView) application from 
the downloaded networkMCI Interact homepage to the 
user [Figure 5 (b) ] , a ClientView applet is invoked at 
step 1362 to display an online invoice screen at the 
customer workstation. As indicated at step 13 64, the 

45 user then enters the customer identifiers on the 

online invoice screen which are then checked against 
the available list of customer identifiers in the 
online invoice server's database at step 1368. If the 
customer identifier does not exist or is not a valid 

50 type at step 1370, the user is prompted to re-enter 
the identifier at step 1365. When the customer 
identifier is properly validated, the user is 
presented with the online invoicing products 
associated with the customer identifier at step 1372. 

55 The user then may select products by their date ranges 
at step 1374 for viewing. At step 1376, a server 
module then retrieves a list of document based on the 
selected product and date range from the online 
invoicing database, and at step 1378, the list is 

60 presented to the user, from which the user may select 
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to view a document, at step 1380. Upon the user 
selection, the server modules retrieve the document 
from the database at step 1382. At step 1384, the 
invoice and/or report documents are presented to the 
5 user at the user's workstation. At step 1836, the 

user may scroll through, or print the data presented, 
or the user may, at step- 1388, select to view another 
document at step 1378. 

The information stored in the database 1355 

10 generally originate from different billing systems. 

When data is available from these billing systems, the 
online invoicing server typically performs a 
conversion process and stores the converted data on 
tape until an audit approval. When the converted data 

15 is audited and approved, the data having the invoicing 
documents are stored to the database 1355. After the 
data has been stored in the database for a 
predetermined period, it may be moved from a direct 
access storage device (DASD) and stored on optical 

20 platters. These platters may remain in an optical 
jukebox for another predetermined period and then 
migrated to an optical shelf where the data may be 
available for a certain period. 

Having described generally, an overview of the 

25 online invoicing application service and its 

integration with the networkMCI Interact 's network and 
data infrastructure, the specific functionalities of 
the online invoicing application, namely the online 
invoicing GUI application on the client platform side 

30 and the online invoicing server in the enterprise 
Intranet, will now be described in detail below. 



Online invoicing GUI application 

As in the other nMCI Internet network management 

35 client applications, the online invoicing client 

application is implemented in Java to ensure platform 
independence and particularly is developed in 
accordance with many of the networkMCI Interact' s 
common objects, as described herein, for achieving 

40 interoperability with the application backplane. The 
client component of the online invoicing includes a 
client interface for the user to select what data to 
retrieve. The data is then retrieved through various 
application processing, and a list of invoices and 

45 reports are provided for the user to choose from for 

online viewing. When a customer clicks on the "online 
invoice" icon 99 on the home page [Figure 5 (b) ] , after 
a proper authentication via a logon, the customer is 
presented with a criteria screen 1900 as shown m 

50 Figure 53(a) from which the customer may specify 
various types of, and date ranges for, invoices 
desired, e.g., Vnet invoices and the Concert Cross 
Border Reporting. The criteria screen 19 00 is divided 
into a customer identifier section 1902, products 

55 section 1910, and dates section 1912. The customer 

identifier type includes identification by corporate 
id 1906, account id, bill payer id, and/or mega id. 
Each online invoicing user is given at least one 
identifier type 19 06 and a customer identifier number 

60 1908 associated with the type at the time of order 



WO 99/15979 



PCT/US98/20170 



-158- 



entry via the StarOE. The StarOE maintains this 
customer information and communicates the information 
to the online invoicing GUI application, when the 
application is invoked by the backplane applet. 
5 Accordingly, at the same time the online invoicing GUI 
application displays the criteria screen 1900, it also 
populates the identifier-type 1906 and customer 
identifier 1908 fields automatically as received from 
the StarOE user authentication and entitlement system. 
10 The user may then select a desired identifier 

type from the list of identifier types shown at 1906. 
The online invoicing GUI application then 
automatically fills in the customer identifier field 
1908 associated with the identifier type selected. In 
15 addition, if the customer's last selection was made 

with a certain type, e.g., corp id, the next time the 
customer views the criteria screen 1900, the corp id 
identifier type will be selected automatically. After 
selecting a desired identifier, the user typically 
20 then may execute the search of invoices available for 

that identifier by clicking on the retrieve button 
1904, pressing an enter key, or using a fast key 
combination such as Alt+S. 

The products and dates sections 1910, 1912 are 
25 used for displaying the service products for which 
invoice viewing is available for a given customer 
identifier type and the date range for the available 
invoices. When the user executes the search, the 
products field 1910 is filled in with the date ranges 
30 1912, indicating available invoice reports for various 
period ranges. For retrieving invoice documents, the 
user may select ranges of dates including multiple 
ranges of dates as shown, and then click on the 
retrieve button 19 04, press enter, use the fast key 
35 combination Alt+R, or click on any area within the 

date range list box 1912. 

Upon executing the retrieve user command, the 
online invoicing GUI application displays the screen 
1915 shown at Figure 53(b) listing the report 
40 documents. For each document, date, invoice number, 
bill payer id, and number of pages are displayed as 
shown in screen display 1915. The status bar 1917 at 
the bottom of the screen may display a number of 
indices (document lists) loaded. The number of 
45 indices which may be loaded at one time may be 

configurable by a customer via the online invoicing 
GUI application. An invoice report listed then may be 
selected and retrieved by clicking on the retrieve 
button 1904, pressing an enter key or double clicking 
50 on a highlighted item 1918, or using a fast key 
combination such as alt+R. When a selection is 
entered, a page range selection box 1920 appears. The 
selection box 192 0 allows customers to enter in the 
desired page range for viewing. The mail/payment 
55 option 1922 for retrieving only the remittance pages 
without having to retrieve additional invoice pages, 
is available from this screen. 

Figure 54 illustrates a sample invoice document 
1925 retrieved when an invoice item is selected from a 
60 screen 1915 shown at Figure 53 (b) . Using the menu bar 
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1927 or a tool bar 1928, a customer may access the 
following functions: open a saved document; save the 
current document; print the current document; fax the 
current document; Batch Print a document; Search the 
5 document for word(s); display the first downloaded 
page; display the previous page; display the next 
page; display the last downloaded page; Go to a 
specified page; increase the font size of the 
displayed document; reset the font of the displayed 

10 document to the default; decrease the font size of the 
displayed document; and, return to the screen that 
invoked the document . 

With more particularity, the batch print option 
may allow customers to send a batch print job to be 

15 performed at the enterprise Intranet to the customers, 
e.g., via Federal Express, at a location specified by 
the customer. 

Another feature provided by the ClientView system 
1300 includes an accumulator function which allows 

20 customers to add up numerical figures, such as minutes 

and charges, by highlighting the numbers directly on 
the screen. 

The above-mentioned fax current document option 
offered by the online invoicing application includes 
25 an ability to fax to the customer, at a customer 

specified location, a current page, specified range of 
pages, or the entire document by making an appropriate 
selection in a fax dialog box. 



30 Online invoicing server 

As described above, the online invoicing provides 
on-line visibility to various networkMCI Interact 
documents. In presenting various documents online to 
a customer, the GUI client application communicates to 

35 a online invoicing server via the proxy for retrieving 
up-to-date information which the server maintains. 
These documents are indexed and stored in the online 
invoicing' s database 1355 (Figure 52). The online 
invoicing server includes several processes for 

40 performing the indexing and storing of the documents. 

Figure 55 illustrates a process flow 1400 of the 
online invoicing server 1350. The server may receive 
data from a number of data centers 1432. Figure 56 
shows three data center locations: location "A" 1432a, 

45 location "B" 1432b, and location "C" 1432c, as 

illustrative examples. At each site, invoice data 
associated with various products is available from 
various billings systems associated with the products, 
as shown at 1434. The products may include Vnet, toll 

50 free, Cross Border, Mega, etc. 

In a preferred embodiment, an online invoicing' s 
conversion process 143 6 is used to convert documents 
at each of the data centers. The conversion process 
generally defines the key information necessary to 

55 retrieve the document and compresses the document for 
storing. Each conversion process 1436 generally 
performs the same tasks. More specifically, these 
tasks include creating a formatted compressed data set 
(FCDS) file and a conversion stats report for each 
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conversion run. The FCDS file is the document which 
may eventually be incorporated into the online 
invoicing database. At step 1438, the online 
invoicing conversion process reads in a PARM file and 
5 an invoice file. The PARM file includes document 

information such as the logical record length. The 
invoice file is read one -line at a time and at step 
1440, key information including page numbers and 
document dates is placed in a header record which is 

10 kept in memory until the FCDS file is created. At 

step 1446, the conversion process creates compressed 
pages of the document. The compressed pages follow 
the header record in the FCDS file. Once the FCDS 
file is created at step 1448, the file is stored on 

15 tape at step 1450, and the B and C locations NDM the 
tape to A at step 1452. At step 1452, the conversion 
stats report is also created which includes page 
information and conversion information associated with 
each conversion run. The last line of the report has 

20 the conversion stats record, which includes the number 
of pages converted and the number of headers created. 
This report is then NDM' d to A by B 1432b and C 1432c 
and kept on DASD for future reviews and audit 
verification . 

25 The FCDS file is generally placed on hold, as 

indicated at step 1454, until audit approval is 
received through MCIMail, which is sent by various 
groups responsible for auditing and approving the 
document files sent to the online invoicing. Once the 

30 audit approval e-mail is received, an online invoicing 
production manually enters the product/division date 
and the invoice count into the audit statistics 
database 1459, at step 1456. The store job is 
manually released at step 1458 by the online invoicing 

35 production control after audit approval is received. 

The online invoicing includes a DB2 database 
subsystem residing in a NOR4 mainframe. The subsystem 
further includes an object database and an index 
database. An online invoicing store process 1460 _ 

40 loads the compressed document to an online invoicing 
object database and an online invoicing index load 
process 1480 stores index pointers to each document m 
the index database. An audit check is executed to 
ensure that the correct number of documents are added 

45 to the online invoicing databases during the object 
load and index load processes. 

More particularly, the store process loads the 
conversion stats record into the audit stats database 
at step 1462. At step 1464, the conversion records 

50 are then matched against the manually entered audit 
stats records. The store process 1460 also includes 
loading of the FCDS file from which is builds an index 
for each object and an index file, which includes the 
pointers to the document, as shown at step 14 66. The 

55 store process 1460, the loads the compressed documents 
into the online invoicing object database 1467, as 
indicated at step 1468. At step 1470, the store 
process 1460 then creates a store status report and 
loads the report into the audit stats database 1459. 

60 At step 1472, an audit checkpoint verifies that the 
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stored numbers match the converted numbers., If there 
are nay errors with the numbers in the audit stats 
database at any point in this process, the job may 
automatically stop the store process 1460 until the 
5 feed/problem is corrected. Once these numbers are 

verified, the index process 1480 may begin. 

The index process 1480 at step 1482, i.e., 
EDINDEXX as shown in Figure 5 5 as an example, 
generally loads the index pointer for each document, 

10 which are typically created by the store process 1460. 
At step 1484, the process 1480 also updates the 
account product table with new customer identifiers 
such as the corp ids or billpayers. At step 1486, the 
index process 1480 creates an index status report. At 

15 step 1488, another audit checkpoint verifies that the 
index numbers match the stored numbers. The stored 
and indexed data are kept on DASD 1491 for a 
predetermined number of days, e.g., 4 5 days as shown 
at step 1492. After the predetermined number of days, 

20 the object access method (OAM) copies the files from 

DASD 1491 to an optical disk via the optical drive 
1493. After another predetermined period, OAM 
migrates the objects from the optical disk to the 
optical shelf as shown at step 1494, where they remain 

25 available for another predetermined period of time. 
Once the indexes are loaded into the database, the 
documents are available for viewing. 

The following database tables are included in the 
online invoicing database: a product cross reference 

30 table which assigns the online invoicing product code 
to the product name; a CDSPARM table which keeps the 
store precess run statistics to allow for a restart 
when necessary and which includes an entry for each 
product code and runstream; an EDBAAPPL table which 

35 assigns a product code to a store group; a statistics 

audit table which keeps audit statistics for each 
product/runstream logged by the store process; and a 
conversion program parameter file which defines where 
the conversion may find the documents key information. 

40 The information on documents for imaging and 

storing are typically received from the various 
networkMCI Interact 's application services. 

The online invoicing server application is 
typically written in COBOL II using CICS/DB2 and OAM. 

45 The persons skilled in the art would appreciate that 
the server application may also be implemented with 
any other compiler languages or software tools. The 
server application includes a startup transaction 
(EDUP) , and a multipurpose transaction, EDS2 . The 

50 EDUP transaction passes several DB2 tables such as a 

function table, a version control table, and the batch 
print request table. The EDUP transaction also calls 
OAM to verify OAM is active and to get the token for 
future calls to OAM. An in-core table is built for 

55 system information and temp storage records are built 
for version control and batch print pricing. The EDUP 
is generally executed at CICS startup time. 

EDS2 is a multi-purpose transaction which is 
started when a request is received from a client GUI 

60 application. Its functions may include product and 
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date listing, index retrieval such as shown, at 1915 
Figure 53(b), and batch print request storing. The 
transaction uses the common top-level function 
(EDOCS000) and links to a lower level function 
5 designed to perform a specific task, based on a 

specific function. The lower level function results 
are passed back to the top-level function which checks 
return codes for possible error. The data result is 
then passed to the client GUI application via the 

10 proxy and the Web/dispatcher 1335 (Figure 51) , and 

statistics are written to a VSAM file. EDS 2 is also 
executed for document retrieval for retrieving invoice 
documents shown at 1925 Figure 54. It uses the 
common top-level function and links to lower level 

15 functions to perform the retrieval processing. 

Figure 56 is a detailed ClientView server process 
flow diagram 2000 illustrating the server processes 
for responding to the client requests. After a user 
2002 properly logs on the networkMCI Interact and 

20 invokes the online invoicing application at step 2004, 

by selecting an appropriate icon on the networkMCI 
Interact homepage, the online invoicing client GUI 
application, at step 2006, generally requests 
communications with a listener process running m the 

25 server. 

Generally, the communications from the online 
invoicing server to the client workstation is 
performed by a set of calls to the TCP/IP address 
space. As an example, a listener process, EZACIC02 is 

30 activated at CICS initiation, and constantly "listens" 
for activities. When a request is received from the 
client, the listener, e.g., EZACIC02, invokes the EDS2 
transaction, at step 2008. At step 2010, CICS invokes 
the first program, i.e., EDOCS000 m the example 

35 shown, in the transaction EDS2 via the CICS 

transaction control table. Then, at step 2012, 
EDOCS000 loads system tables into memory. In 
addition, EDOCS000 also makes calls to TCP/IP to 
communicate with the client GUI application. EDOCS000 

40 is also responsible for logging both successful and 

unsuccessful requests, as well as routing the request 
to one of many sub - programs , based on a function code 
and an object name. The sub -programs include 
EDOCS030, EDOCS001, EDOCS02 0/EDOCS040 , and 

45 EDOCS220/EDOCS440 , each of which will be described m 

more detail below. 

When the listener process has a data to pass to 
EDOCS000, EDOCS000 invokes a RETRIEVE command to get 
the data. EDOCS000 then performs a take socket and 

50 responds to the client by a write socket. The client 
then typically responds to the server with a function 
code and additional data such as a customer 
identifier, dates, etc. EDOCS000 performs data 
validation such as function codes, checks to see if 

55 the system is up, supplies pricing information for 
batch print, links to lower level functions, checks 
the results of the lower level results, produces error 
entries where needed, writes statistics, and passes 
any data retrieved (or an error) back to the client 

60 GUI application. 
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After each call to a subroutine, EDOCS000 checks 
a return code. EDOCS000 also checks return codes from 
calls to the TCP/IP and posts an error message when 
the TCP/IP return code is a non-zero value, indicating 
5 an error. The errors are generally logged in the TCP 
data file and may be reviewed as needed. When all the 
processing necessary for responding to the client is 
complete and response data is successfully sent to the 
client, the client GUI application sends an 

10 acknowledgment for the receipt of the data, back to 

the server. The socket is then closed, freeing it for 
another request to be communicated. 

Referring back to Figure 57 at step 2014, 
EDOCS03 0 is executed when a request is made to 

15 retrieve all products and dates associated with a 

customer identifier. This process gets all entries 
from the account/product cross-reference table for the 
customer identifier received from the client GUI 
application. For each entry in the account/product 

20 cross-reference table found, the process looks up the 
product on the product cross-reference table. If the 
group is different than any group processed yet, then 
the process adds an additional entry at the group 
level, gets the product description from the product 

25 cross-reference, and gets distinct dates for addition 
to the table. When the entries in the table have been 
exhausted, the process sorts the products, e.g., in an 
alphabetical order by product description followed by 
dates sorted in descending order, for proper display 

30 at the client workstation. At step 2016, the sorted 
data is returned to the client GUI application for 
viewing by the user. 

EDOCS000 links to EDOCS001 and executes it when a 
client GUI application requests index retrieval for 

35 specified dates within specified products. EDOCS000 
passes in the customer identifier, the product and a 
list of dates received from the client GUI application 
as entered in the criteria screen 19 00 at Figure 
53(a). At step 2018, EDOCS0001 reads the index table 

40 and extracts from the online invoicing database all 
matching entries and sorts them in order of date and 
invoice numbers. Different sorting order may be 
utilized for different products. The entries meeting 
the product /date criteria are then sent back to the 

45 client GUI application for presentation to a customer 
at step 2020. The matching entry message, which is 
sent to the client GUI application includes a subset 
of entry records found. 

EDOCS000 links to EDOCS020/EDOCS040 and executes 

50 either one when a client GUI application requests for 
document retrieval such as the invoice document 1925 
shown at Figure 54. EDOCS020 and EDOCS040 are 
generally used for document retrieval and are clones 
of each other. The difference between the two is that 

55 EDOCS020 was written for new style objects and 

EDOCS040 was written to handle old style objects. In 
their operation, EDOCS020 and EDOCS040 generally 
allocate storage for the document and retrieve the 
document meeting the requested page range into the 

60 allocated storage as shown at step 2022. The 
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retrieved document is then sent back to the client GUI 
application for presentation to the customer. 

At step 2024, EDOCS220 and EDOCS440 are used for 
object searches on the document requested. These 
5 processes perform similar functions as do the EDOCS020 
and EDOCS040 processes. They typically get the 
collection name and the object, and loop through the 
index portion of the object to find pages in the 
requested range for the requested document. At step 

10 2026, the retrieved document is sent back to the 

client GUI application and is displayed on the user's 
workstation. 

For servicing batch-printing requests, EDOCS000 
may link to EDOCS050 and execute it. A next available 

15 request number is determined by getting the EDBPREQ 

record in the database and adding one to the last 
request number. EDBPREQ record is then updated. The 
information passed to EDOCS050 is then mapped into the 
EDBPRINT table layout, and a new row is inserted into 

20 DB2. Errors from EDOCS050 are sent to EDOCS000, which 
reports them to the client GUI application. 



E-Billinq 

On-Line E-Billing is an electronic commerce 

25 enabling tool that will allow selected networkMCI 

Interact customers to receive, analyze, and pay their 
invoice (s) over the public Internet. On-Line E- 
Billing provides a variety of Internet -based billing 
features that includes electronic invoice 

30 presentment, invoice analysis and electronic bill 
payment, all from a single point of customer 
authentication . 

By utilizing the present invention, customers 
may download their invoice information into their 

35 Accounts Payable systems. For the customer this will 
same time and money by not having to manually load § the 
data from the paper invoices. In addition, this will 
increasing accuracy of the bill payment process for 
the customer. The present invention provides an 

40 "intelligent, navigable invoice" where customers and 

users can drill down from summary level information to 
specific site and service level detail. By 
providing more timely receipt of information, the 
customer is able to identify inefficient and costly 

45 operations sooner, is able to make adjustments sooner, 
and may thereby save money that would otherwise be 
lost. Customers are also able to more easily analyze 
their invoices, thereby facilitating customer 
identification of inef t icient/costly operations. 

50 The present invention utilizes Electronic Funds 

Transfer (EDF) , which provides for timely payment, 
reduces the "float" of funds and saves on clerical, 
postage and bank expenses. The Electronic Bill 
Presentment and Payment (EBPP) application and 

55 database may reside on a highly secure "Virtual Vault" 
server technology that allows absolutely no remote 
access to the server. 

The On-Line E-Billing portion of the present 
invention is initiated through the StarOE order entry 
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system in a manner similar to -that previously 
described with opening and modifying customer or user 
entitlements to the present invention. Each phase of 
the account setup, activation and confirmation is 
5 tracked and available for viewing by help 

desk/customer service personnel to aid in trouble 
resolution. A Log is kept of errors for 
trouble/maintenance procedures. When registering for 
On-Line E-Billing, the introductory web-page for 

10 registration is downloaded in a manner similar to the 
network MCI Home page previously discussed. This page 
tells the registrant what will be required to complete 
registration, including any MCI Corp and Bill Payer 
Ids, Taxpayer Ids, or other information that is not 

15 immediately accessible so that the customer can gather 
this information prior to initiating the process. 

During registration, the customer picks the 
appropriate customer service segment for the customer. 
Once the segment is determined, appropriate customer 

20 service information is displayed to that customer. A 
"Click and Connect" 8 00 number for connection to 
networkMCI On-Line E-Billing applications support 
group is provided ("I need help with this 
application") . If a customer does not have a 

25 multimedia pc, the click-n- connect button is not 

displayed, only the 800 # for the application support 
group will be displayed. 

The customer or user then receives a screen 
notification that all data has been successfully 

30 received, and a confirmation number is noted on the 

screen notification. This confirmation number, (order 
number) , is used to track the order. If the registrant 
did not enter the correct data needed for a successful 
registration, a screen notification will state the 

35 field that causing the rejection. 

Once the order is successfully received, both 
the enterprise account management team and the newly 
registered customer receive an e-mail confirmation 
that the order was received. As discussed previously 

40 with respect to Order Entry modification of customer 
entitlements, the notification includes customer id, 
names, level of access (view/approve/pay) for each 
user and corp/billpayers they have access to, the user 
or customer registrant, and the registrants vnet, if 

45 applicable. Need to validate name, address, SSC, 

customer segment and corp id is also validated with 
the host COPS system. 

Preferably, the customer has the option of 
signing up for only one payment option at a time. The 

50 customer may be required to give a 15 day notice to 
change that payment option. 

The present invention also provides for a 
"print and pay" option wherein the customer may 
receive the invoice electronically, print it at the 

55 customer site, and render payment in a conventional 

manner. When the print and pay option is selected, 
the following fields are displayed to ensure the print 
and pay remittance slips are correct: 

- Invoice numbers 
60 - Invoice dates 

- Billpayer ID (s) 
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- Invoice amount due 

- Customer name and number 

- Payment amount 

- Check number 

5 A desired lockbox address for the enterprise 

may also be printed on the remittance page to ensure 
direction of the payment- to the appropriate facility. 

If a customer signs up for EFT during 
registration, the customer's routing number is 

10 validated to verify that it is a valid routing number. 
After all EFT registrations, a "prenote" verification 
is provided that the customer's checking and bank 
account information is valid. The Electronic Fund 
Transfer feature utilizes ACH files for fund transfers 

15 through an appropriate banking institution. The ACH 
file is formatted as EDI 820 and must be encrypted. 
The following elements need to be included in the bank 
ACH file: 

@1 '10' 
20 @3 ABANUM 

@15 TRACE 

@2 7 BANKACCT 

@3 9 PAYFORM 

@42 ALLTOT 
25 @53 EFFDATE 

@59 PAYNUM 

@71 PAYACCT 

@8 3 PAYNAME 

Oil 8 TRANCD 
30 @001 '20' 

@0 0 3 LINENUM 

@009 INVOICE 

@021 TR_AMT 

@03 2 CUSTNUM 
35 @044 NAME 

@10 5 TOT_CRED 

©117 AMOUNT 

The customer receives a confirmation number for 
40 all EFT transaction. The customer has an option to 

schedule recurring and non-recurring EFT options, 
including payment of non-recurring payments. The 
customer also has the ability to cancel a scheduled 
non-recurring payment if it is canceled before X (TBD) 

45 of scheduled payment. When a non-recurring 

payment is submitted by the customer, an appropriate 
screen notifies the customer that the payment was 
accepted and is in pending status. 

50 

Communications Security 

communications security, which relates to the 
authenticity of the enterprise web servers 24 (Figure 
55 2) and the security of the transmitted data is now 
described with respect to an implementation in the 
preferred embodiment of the invention of the Secure 
Sockets Layer (SSL) version of HTTPS . 

In order for a communication to be secure, it 
60 must be known that the message comes from the correct 
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source, that it arrives at the correct destination, 
that it has not been modified, and has not been 
intercepted and understood by a third party. Normal 
encryption protects against understanding the message, 
5 even if intercepted, and certain types of cipher 

encryption provide the ability to determine that the 
message has been tampered with and in some cases 
reconstruct the message even if intercepted and 
intentionally garbled. The disadvantage of normal 

10 encryption is the difficulty associated with the 

secure distribution and updates of the keys used for 
encryption and decryption. 

Public key encryption solves the distribution 
and update problem, but does not, for the public 

15 Internet, ensure the identity of the party with whom 

one is communicating. A spoof er who appropriates the 
DNS address of an enterprise for a leg of the Internet 
can substitute the spoofers public key for the public 
key of the enterprise with whom the user is attempting 

20 to communicate, thereby fooling the user into 

revealing the user name and password used on the 
enterprise system. To avoid this problem, digital 
signatures have been developed to ensure the identity 
of the sender. They also, simultaneously, commit the 

25 sender to the message, avoiding subsequent 

repudiation. 

The communications link between the enterprise 
and the user may be secured with S-HTTP, HTTPS, or 
proprietary encryption methodologies, such as VNP or 

30 PPTP tunneling, but in the preferred embodiment 
utilizes the Secure Sockets Layer (SSL) protocol 
developed by Netscape Communications. It is noted 
that these solutions are intended for use with IPv4, 
and that Ipv6 , presently under comment by the Internet 

35 Engineering Steering Group, may enable secure 

transmissions between client and server without resort 
to proprietary protocols. The remaining security 
protocols of the present invention may be used with 
Ipv6 when it becomes an available standard for secure 

40 IP communications. 

The SSL component of the HTTPS also includes 
non- repudiation techniques to guarantee that a message 
originating from a source is the actual identified 
sender. One technique employed to combat repudiation 

45 includes use of an audit trail with electronically 
signed one-way message digests included with each 
transaction. This technique employs SSL public -key 
cryptography with one-way hashing functions. 

Another communications issue involving the 

50 secure communications link, is the trust associated 

with allowing the download of the Java common objects 
used in the present invention, as discussed earlier 
with respect to the browser, since the Java objects 
used require that the user authorize disk and I/O 

55 access by the Java object. 

Digital Certificates, such as those developed 
by Verisign, Inc. entitled Verisign Digital ID™ 
provide a means to simultaneously verify the server to 
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the user, and to verify the source of the Java object 
to be downloaded as a trusted source as will 
hereinafter be described in greater detail. 

The above-mentioned authentication and 
5 encryption processes are performed in the handshake 
protocol, which can be summarized as follows: The 
client sends a client hello message to which the 
server must respond with a server hello message, or 
else a fatal error will occur and the connection will 

10 fail. The client hello and server hello are used to 
establish security enhancement capabilities between 
client and server. The client hello and server hello 
establish the following attributes: Protocol Version, 
Session ID, Cipher Suite, and Compression Method. 

15 Additionally, two random values are generated and 

exchanged: CI ientHel lo . random and ServerHello . random. 

Following the hello messages, the server will 
send its digital certificate. Alternately, a server 
key exchange message may be sent, if it is required 

20 (e.g. if their server has no certificate, or if its 

certificate is for signing only) . Once the server is 
authenticated, it may optionally request a certificate 
from the client, if that is appropriate to the cipher 
suite selected. 

25 The server will then send the server hello done 

message, indicating that the hello-message phase of 
the handshake is complete. The server will then wait 
for a client response. If the server has sent a 
certificate request Message, the client must send 

30 either the certificate message or a no_certif icate 

alert. The client key exchange message is now sent, 
and the content of that message will depend on the 
public key algorithm selected between the client hello 
and the server hello. If the client has sent a 

35 certificate with signing ability, a digitally - signed 
certificate verify message is sent to explicitly 
verify the certificate. 

At this point, a change cipher spec message is 
sent by the client, and the client copies the pending 

40 Cipher Spec into the current Cipher Spec. The client 
then immediately sends the finished message under the 
new algorithms, keys, and secrets. In response, the 
server will send its own change cipher spec message, 
transfer the pending to the current Cipher Spec, and 

45 send its finished message under the new Cipher Spec. 

At this point, the handshake is complete and the 
client and server may begin to exchange user layer 
data . 



50 



55 



Client 
ClientHello 



Server 



ServerHello 
Certificate* 
ServerKeyExchange* 
Cert if icateRequest* 
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< ServerHelloDone 

Certificate* 
CI ientKeyExchange 
Certif icateVerif y* 
5 [ChangeCipherSpec] 

Finished > 

[ChangeCipherSpec] 
< 

Finished 

10 Login Data < > Login HTML 

* Indicates optional or situation- dependent 
messages that are not always sent. 

15 Figure 57 is a schematic illustration of a 

logical message format sent from the client browser to 
the desired middle tier server for a particular 
application. 

As mentioned herein, the messages created by 

20 the client applications (Java software) are 

transmitted to the secure Web Servers 24 over HTTPS. 
For incoming (client- to- server ) communications, the 
Secure Web servers 24 decrypt a request, authenticate 
and verify the session information. The logical 

25 message format from the client to the Web server is 
shown as follows: 

| I TCP/IP | | encryption | | http | | web header | | 
dispatcher header I | proxy- specif ic data | | 

30 

where "| \" separates a logical protocol level, and 
protocols nested from left to right. Figure 57 
illustrates a specific message sent from the client 
browser to the desired middle tier server for the 

35 particular application. As shown in Figure 57, the 
client message 170 includes an SSL encryption header 
171 and a network- level protocol HTTP/POST header 172 
which are decrypted by the Secure web Server (s) 24 to 
access the underlying message; a DMZ Web header 174 

40 which is used to generate a cookie 181 and transaction 
type identifier 186 for managing the client/server 
session; a dispatcher header 175 which includes the 
target proxy identifier 180 associated with the 
particular type of transaction requested; proxy 

45 specific data 185 including the application specific 
metadata utilized by the target proxy to form the 
particular messages for the particular middle tier 
server providing a service; and, the network- level 
HTTP/ POST trailer 186 and encryption trailer 188 which 

50 are also decrypted by the secure DMZ Web server 24. 

Referring back to Figure 2, after establishing 
that the request has come from a valid user and 
mapping the request to its associated session, the 
request is then forwarded through the firewall 25b 
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over a socket connection 23 to one or more, 
decode/dispatch servers 26 located within the 
corporate Intranet 30. The messaging sent to the 
Dispatch Server 26 will include the user identifier 
5 and session information, the target proxy identifier, 

and the proxy specific data. The decode/dispatch 
server 26 then authenticates the user's access to the 
desired middle- tier service from cached data 
previously received from the StarOE server as will be 

10 hereinafter described in greater detail in connection 
with User Identification and Authentication. 

As shown in Figure 2, the Secure Web server 24 
forwards the Dispatcher header and proxy - specif ic data 
to the Dispatch Server 2 6 " enriched" with the identity 

15 of the user (and any other session- related 

information) as provided by the session data/cookie 
mapping, the target proxy identifier and the proxy - 
specific data. The dispatch server 26 receives the 
requests forwarded by the Secure Web server (s) 24 and 

20 dispatches them to the appropriate application server 
or its proxy. The message wrappers are examined, 
revealing the user and the target middle -tier service 
for the request. A first -level validation is 
performed, making sure that the user is entitled to 

25 communicate with the desired service. The user's 
entitlements in this regard are fetched by the 
dispatch server from StarOE server 39 at logon time 
and cached. Assuming that the Requestor is authorized 
to communicate with the target service, the message is 

30 then forwarded to the desired service's prox. Each of 
these proxy processes further performs: a validation 
process for examining incoming requests and confirming 
that they include validly formatted messages for the 
service with acceptable parameters; a translation 

35 process for translating a message into an underlying 
message or networking protocol; and, a management 
process for managing the communication of the specific 
customer request with the middle -tier server to 
actually get the request serviced. Data returned from 

40 the middle- tier server is translated back to client 

format, if necessary, and returned to the dispatch 
server as a response to the request. 

It should be understood that the application 
server proxies can either reside on the dispatch 

45 server 26 itself, or, preferably, can be resident on 
the middle-tier application server, i.e., the 
dispatcher front end code can locate proxies resident 
on other servers. 

50 Session Security 

as described previously, the SLL protocol 
includes one level of session security, and may 
negotiate and change in cipher code between sessions. 
Additionally, the present invention employs the 
55 "cookie" feature set of contemporary browsers to 

maintain session security, and prevent session 
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hi jacking or the use of a name and password obtain by 
sniffing, spoofing or EMR monitoring. 

Figure 58 is a data flow diagram illustrating 
data flow among the processing modules of the "network 
5 MCI Interact" during logon, entitlement 

request/response, heartbeat transmissions and logoff 
procedures. As shown in Figure 58, the client 
platform includes the networkMCI Interact user 2 0 
representing a customer, a logon Web page having a 

10 logon object for logon processing 220, a home page 79 
having the backplane object. The Web server 24, the 
dispatcher 26, cookie jar server 28, and StarOE server 
39 are typically located at the enterprise site. 
As described above, following the SSL 

15 handshake, certain cab files, class files and 

disclaimer requests are downloaded with the logon Web 
page as shown at 221. At the logon Web page, the 
customer 20 then enters a userid and password for user 
authentication as illustrated at 221. The customer 

20 also enters disclaimer acknowledgment 221 on the logon 
page 220. If the entered userid and password are not 
valid or if there were too many unsuccessful logon 
transactions, the logon object 22 0 communicates the 
appropriate message to the customer 2 0 as shown at 

25 221. A logon object 220, typically an applet launched 
in the logon Web page, connects to the Web server 24, 
for communicating a logon request to the system as 
shown at 222. The logon data, having an encrypted 
userid and password, is sent to the dispatcher 26 when 

30 the connection is established as shown at 224. The 
dispatcher 2 6 then decrypts the logon data and sends 
the data to the StarOE 39 after establishing a 
connection as shown at 26. The StarOE server 39 
validates the userid and password and sends the 

35 results back to the dispatcher 26 as illustrated at 
226 together with the user application entitlements. 
The dispatcher 26 passes the data results obtained 
from the StarOE 39 to the Web server 24 as shown at 
224, which passes the data back to the logon object 

40 220 as shown at 222. The customer 20 is then notified 

of the logon results as shown as 221. 

When the customer 2 0 is validated properly, the 
customer is presented with another Web page, referred 
to as the home page 79, from which the backplane is 

45 launched typically. After the user validation, the 
backplane generally manages the entire user session 
until the user logs off the "networkMCI Interact". As 
shown at 22 8, the backplane initiates a session 
heartbeat which is used to detect and keep the 

50 communications alive between the client platform and 

the enterprise Intranet site. The backplane also 
instantiates a COUser object for housekeeping of all 
client information as received from the StarOE 39. 
For example, to determine which applications a current 

55 customer is entitled to access and to activate only 
those application options on the home page for 
enabling the customer to select, the backplane sends a 
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"get application list" message via the Web, server 24 
and the dispatcher 26 to the StarOE 3 9 as shown at 
228, 224, and 226. The entitlement list for the 
customer is then sent from the StarOE 3 9 back to the 
5 dispatcher 26, to the Web server 24 and to the 

backplane at the home page 7 9 via the path shown at 
226, 224, and 228. The application entitlements for 
the customer are kept in the COUser object for 
appropriate use by the backplane and for subsequent 

10 retrieval by the client applications. 

The entitlement information for COUser is 
stored in a cookie jar 28, maintained in the cookie 
jar server 28 (illustrated in Figures 2 and 58) . When 
the Web server receives the entitlement requests from 

15 the backplane at the home page 79 or from any other 

client applications, the Web server 24 makes a 
connection to the cookie jar 2 8 and checks if the 
requested information is included in the cookie jar 28 
as shown at 230. The cookie jar 28 is a repository 

20 for various customer sessions and each session details 
are included in a cookie including the entitlement 
information from the OE server 39. During the logon 
process described above, the OE server 3 9 may include 
in its response, the entitlements for the validated 

25 customer. The dispatcher 26 transfers the entitlement 
data to the Web server 24, which translates it into a 
binary format. The Web server 2 4 then transmits the 
binary entitlement data to the cookie jar 28 for 
storage and retrieval for the duration of a session. 

30 Accordingly, if the requested information can be 

located in the cookie jar 28, no further request to 
the StarOE 3 9 may be made. This mechanism cuts down 
on the response time in processing the request. 
Although the same information, for example, customer 

35 application entitlements or entitlements for corp ids, 
may be stored in the COUser object and maintained at 
the client platform as described above, a second check 
is usually made with the cookie jar 2 8 via the Web 
server 24 in order to insure against a corrupted or 

40 tampered COUser object's information. Thus, 

entitlements are typically checked in two places: the 
client platform 10 via COUser object and the Web 
server 24 via the cookie jar 28. 

When a connection is established with the 

45 cookie jar 28, the Web server 24 makes a request for 

the entitlements for a given session as shown at 230. 
The cookie jar 2 8 goes through its stored list of 
cookies, identifies the cookie for the session and 
returns the cookie to the Web server 24 also shown at 

50 230. The Web server 24 typically converts the 

entitlements which are received m binary format, to 
string representation of entitlements, and sends the 
entitlement string back to the backplane running on 
the client platform 10. 

55 Furthermore, the cookie jar 28 is used to 

manage heartbeat transactions. Heartbeat 
transactions, as described above, are used to 
determine session continuity and to identify those 
processes which have died abnormally as a result of a 

60 process failure, system crash or a communications 
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failure, for example. During- a customer session 
initialization, the cookie jar 28 generates a session 
id and sets up "heartbeat" transactions for the 
customer's session. Subsequently, a heartbeat request 
5 is typically sent from a process running on a client 
platform to the Web server 24, when a connection is 
established, as shown at-- 228. The Web server 24 
connects to the cookie jar 2 8 and requests heartbeat 
update for a given session. The cookie jar 28 

10 searches its stored list of cookies, identifies the 

cookie for the session and updates the heartbeat time. 
The cookie jar 2 8 then sends the Web server 24 the 
updated status heartbeat as shown at 23 0. The Web 
server 24 then sends the status back to the client 

15 platform process, also as shown at 230. 

When a customer wants to logoff, a logoff 
request transaction may be sent to the Web server 24. 
The Web server 24 then connects to the cookie jar 2 8 
and requests logoff for the session as shown at 230. 

20 The cookie jar 2 8 identifies the cookie for the 

session and deletes the cookie. After deleting the 
cookie, the cookie jar 28 sends a logoff status to the 
Web server 24, which returns the status to the client 
platform. 

25 Other transaction requests are also sent via 

the Web server 24 and the cookie jar 2 8 as shown in 
Figure 59. Figure 59 is a data flow diagram for 
various transactions communicated in the system of the 
present invention. Typically, when a customer enters 

30 a mouse click on an application link as shown at 231, 
an appropriate transaction request stream is sent to 
the Web server as shown at 232. The Web server 24 
typically decrypts the transaction stream and connects 
to the cookie jar 28 to check if a given session is 

35 still valid as shown at 234. The cookie jar 28 

identifies the cookie for the session and sends it 
back to the Web server 24 as shown at 234. The Web 
server 24 on receipt of valid session connects to the 
dispatcher 26 and sends the transaction reguest as 

40 shown at 236. When the dispatcher 26 obtains the 

request, it may also connect to the cookie jar 28 to 
validate the session as shown at 238. The cookie jar 
28 identifies the cookie for the session and sends it 
back to the dispatcher 26 as shown at 238. The 

45 dispatcher 26, upon receiving the valid session 

connects to a targeted application server or proxy 
237, which may include StarOE, and sends the request 
transaction to the target proxy as shown at 235. The 
server or proxy 2 37 processes the request and sends 

50 back the response as stream of data which is piped 
back to the dispatcher 26 as shown at 235. The 
dispatcher 2 6 pipes the data back to the Web server 24 
as shown at 236, which encrypts and pipes the data to 
the client platform as shown at 232, referred to as 

55 the home page 79 in Figure 59. 

The present invention includes a client 
communications unit for providing a single interface 
from which the backplane and the applications may send 
messages and requests to back-end services. The 

60 client communications unit includes a client session 
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unit and a transactions unit.- The client session unit 
and the transactions unit comprise classes used by 
client applications to create objects that handle 
communications to the various application proxies and 
5 or servers. Generally, the entire communications 

processes start with the creation of a client session 
after a login process. This is started through the 
login process. The user logs into user's Web page 
with a username and password. During a login process, 

10 a client session object of class COClientSession is 
created, and the COClientSession object passes the 
username and password information pair obtained from 
the login process to a remote system administrative 
service which validates the pair. The following code 

15 instructions are implemented, for example, to start up 

a session using the COClientSession class. 
COClientSession ss = new COClientSession () ; 
try { 

ss . setURL (urlString) ; 

20 ss . logon ( " j smith" , "myPassword" ) ; 

} catch (COClientLogonException e) {... 
} catch (MalformedURLException e) {...}; 
In addition, the COClientSession object 
contains a reference to a valid COUser object 

25 associated with the user of the current 

COClientSession obj ect . 

The client session object also provides a 
session, where a customer logs on to the system at the 
start of the session, and if successfully 

30 authenticated, is authorized to use the system until 
the session ends. The client session object at the 
same time provides a capability to maintain session- 
specific information for the life/duration of the 
session. Generally, communications to and from the 

35 client takes place over HTTPS which uses the HTTP 

protocols over an SSL encrypted channel. Each HTTP 
request/reply is a separate TCP/IP connection, 
completely independent of all previous or future 
connections between the same server and client. 

40 Because HTTP is stateless, meaning that each 

connection consists of a single request from the 
client which is answered. by a single reply by a 
server, a novel method is provided to associate a 
given HTTP request with the logical session to which 

45 it belongs. 

When a user is authenticated at login via the 
system administrative server, the client session 
object is given a "cookie" , a unique server - generated 
key which identifies a session. The session key is 

50 typically encapsulated in a class COWebCookie, "public 

COWebCookie (int value).", where value represents a 
given cookie's value. The client session object holds 
this key and returns it to the server as part of the 
subsequent HTTP request. The Web server maintains a 

55 "cookie jar" which is resident on the dispatch server 
and which maps these keys to the associated session. 
This form of session management also functions as an 
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additional authentication of each HTTPS request, 
adding security to the overall process. In the 
preferred embodiment, a single cookie typically 
suffices for the entire session. Alternatively, a new 
5 cookie may be generated on each transaction for added 
security. Moreover, the_ cookie jar may be shared 
between the multiple physical servers in case of a 
failure of one server. This mechanism prevents 
sessions being dropped on a server failure. 

10 In addition, to enable a server software to 

detect client sessions which have "died", e.g., the 
client session has been disconnected from the server 
without notice because of a client -side crash or 
network problem, the client application using the 

15 client session object "heartbeats" every predefined 

period, e.g., 1 minutes to the Web server to "renew" 
the session key (or record) . The Web server in turn 
makes a heartbeat transaction request to the cookie 
jar. Upon receipt of the request, the cookie jar 

20 service "marks" the session record with a timestamp 
indicating the most recent time the client 
communicated to the server using the heartbeat. The 
cookie jar service also alarms itself, on a 
configurable period, to read through the cookie jar 

25 records (session keys) and check the timestamp 

(indicating the time at which the client was last 
heard) against the current time. If a session 
record's delta is greater than a predetermined amount 
of time, the cookie jar service clears the session 

30 record, effectively making a session key dead. Any 
subsequent transactions received with a dead session 
key, i.e., nonexistent in the cookie jar, are 
forbidden access through the Firewall. 

The heartbeat messages are typically enabled by 

35 invoking the COClientSession object's method "public 
synchronized void enableSessionHeartbeat (boolean 
enableHeartbeat ) " , where enableHeartbeat is a flag to 
enable or disable heartbeat for a session. The 
heartbeat messages are typically transmitted 

40 periodically by first invoking the COClientSession 
object's method "public synchronized void 
setHeartbeatlnterval (long millsecslnterval ) " , where 
the heartbeat interval is set in milliseconds, and by 
the COClientSession object's method "protected int 

45 startHeartbeat ( ) " , where the heartbeat process starts 
as soon as the heartbeat interval is reached. Failure 
to "heartbeat" for consecutive predefined period, 
e.g., one hour, would result in the expiration of the 
session key. 

50 

Enterprise Security 

enterprise Security is directed to the security 
of the enterprise network and the data maintained by 
the various enterprise applications with respect to 
55 the open nature of the Internet, and the various 

attacks on the system or data likely to result from 
exposure to the Internet. Usual enterprise security 
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is focused on internal procedures and employees, since 
this represents the biggest single area of exposure. 
Strong passwords, unique user Ids and the physical 
security of the workstations are applicable to both 
5 internal employees and external customers and users 
who will access the enterprise applications. It is 
noted that many of the previously described features 
relating to data encryption for communications 
security and session security are essential parts of 

10 enterprise security, and cooperate with enterprise 
architecture and software infrastructure to provide 
security for the enterprise. 

For example, as will be hereinafter described 
in detail, the present invention uses strong symmetric 

15 key encryption for communications through the 

firewalls to the application servers. This internal 
symmetric key encryption, when coupled with external 
public key encryption provides an extra level of 
security for both the data and the software 

20 infrastructure . 

Figure 60 is a diagram depicting the physical 
networkMCI Interact system architecture 100. As shown 
in Figure 60, the system is divided into three major 
architectural divisions including: 1) the customer 

25 workstation 2 0 which include those mechanisms enabling 
customer connection to the Secure web servers 24; 2) a 
secure network area 17, known as the DeMilitarized 
Zone "DMZ" set aside on MCI premises double firewalled 
between the both the public Internet 2 5 and the MCI 

30 Intranet to prevent potentially hostile customer 

attacks; and, 3) the MCI Intranet Midrange Servers 3 0 
and Legacy Mainframe Systems 4 0 which comprise the 
back end business logic applications. 

As illustrated in Figure 60, a double or 

35 complex firewall system defines a "demilitarized zone" 
(DMZ) between two firewalls 25a, 25b. In the 
preferred embodiment, one of the firewalls 2 5 includes 
port specific filtering routers, which may only 
connect with a designated port on a dispatch server 

40 within the DMZ. The dispatch server connects with an 
authentication server, and through a proxy firewall to 
the application servers. This ensures that even if a 
remote user ID and password are hijacked, the only 
access granted is to one of the web servers 24 or to 

45 intermediate data and privileges authorized for that 
user. Further, the hijacker may not directly connect 
to any enterprise server in the enterprise intranet, 
thus ensuring internal company system security and 
integrity. Even with a stolen password, the hijacker 

50 may not connect to other ports, root directories or 
applications within the enterprise system. 

The DMZ acts as a double firewall for the 
enterprise intranet because the web servers located in 
the DMZ never store or compute actual customer 

55 sensitive data. The web servers only put the data 

into a form suitable for display by the customer's web 
browser. Since the DMZ web servers do not store 
customer data, there is a much smaller chance of any 
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customer information being jeopardized in .case of a 
security breach. 

As previously described, the customer access 
mechanism is a client workstation 2 0 employing a Web 
5 browser 14 for providing the access to the networkMCI 
Interact system via the public Internet 15. When a 
subscriber connects to the networkMCI Interact Web 
site by entering the appropriate URL, a secure TCP/IP 
communications link 22 is established to one of 

10 several Web servers 24 located inside a first firewall 
25a in the DMZ 17. Preferably at least two web 
servers are provided for redundancy and failover 
capability. In the preferred embodiment of the 
invention, the system employs SSL encryption so that 

15 communications in both directions between the 

subscriber and the networkMCI Interact system are 
s ecur e . 

In the preferred embodiment, all DMZ Secure Web 
servers 24 are preferably DEC 4100 systems having Unix 

20 or NT-based operating systems for running services 

such as HTTPS, FTP, and Telnet over TCP/IP. The web 
servers may be interconnected by a fast Ethernet LAN 
running at 100 Mbit/sec or greater, preferably with 
the deployment of switches within the Ethernet LANs 

25 for improved bandwidth utilization. One such 

switching unit included as part of the network 
architecture is a HydraWEB™ unit 45, manufactured by 
HydraWEB Technologies, Inc., which provides the DMZ 
with a virtual IP address so that subscriber HTTPS 

30 requests received over the Internet will always be 
received. The Hydraweb™ unit 4 5 implements a load 
balancing algorithm enabling intelligent packet 
routing and providing optimal reliability and 
performance by guaranteeing accessibility to the "most 

35 available" server. It particularly monitors all 

aspects of web server health from CPU usage, to memory 
utilization, to available swap space so that 
Internet/Intranet networks can increase their hit rate 
and reduce Web server management costs. In this 

40 manner, resource utilization is maximized and 

bandwidth (throughput) is improved. It should be 
understood that a redundant Hydraweb™ unit may be 
implemented in a Hot/Standby configuration with 
heartbeat messaging between the two units (not shown) . 

45 Moreover, the networkMCI Interact system architecture 
affords web server scaling, both in vertical and 
horizontal directions. Additionally, the architecture 
is such that new secure web servers 24 may be easily 
added as customer requirements and usage increases. 

50 The use of the HydraWEB™ enables better load 
distribution when needed to match performance 
requirements. 

As shown in Figure 60, the most available Web 
server 24 receives subscriber HTTPS requests, for 

55 example, from the HydraWEB™ 4 5 over a connection 3 5a 
and generates the appropriate encrypted messages for 
routing the request to the appropriate MCI Intranet 
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midrange web server over connection 3 5b, router 55 and 
connection 23. Via the Hydraweb™ unit 45, a TCP/IP 
connection 3 8 links the Secure Web server 24 with the 
MCI Intranet Dispatcher server 26. 
5 Further as shown in the DMZ 17 is a second RTM 

server 52 having its own connection to the public 
Internet via a TCP/IP connection 32. This server 
provides real-time session management for subscribers 
of the networkMCI Interact Real Time Monitoring 
10 system. An additional TCP/IP connection 4 8 links the 
RTM Web server 52 with the MCI Intranet Dispatcher 
server 26. 

With more particularity, as further shown in 
Figure 60, the networkMCI Interact physical 

15 architecture includes two routers: a first router 55 

for routing encrypted subscriber messages from a 
Secure Web server 24 to the Dispatcher server 26 
located inside the second firewall 25b; and, a second 
router 65 for routing encrypted subscriber messages 

20 from the RTM Web server 52 to the Dispatcher server 2 6 
inside the second firewall. Although not shown, each 
of the routers 55, 65 may additionally route signals 
through a series of other routers before eventually 
being routed to the nMCI Interact Dispatcher server 

25 26. In operation, each of the Secure servers 24 

function to decrypt the client message, preferably via 
the SSL implementation, and unwrap the session key and 
verify the users session from the COUser object 
authenticated at Logon. 

30 After establishing that the request has come 

from a valid user and mapping the request to its 
associated session, the Secure Web servers 24 will re- 
encrypt the request using symmetric RSA encryption and 
forward it over a second secure socket connection 2 3 

35 to the dispatch server 26 inside the enterprise 

Intranet . 

Figure 61(a) and 61(b) are schematic 
illustrations showing the message format passed 
between the dispatcher 2 6 and the relevant application 

40 specific proxy, (Figure 61 (a) ) and the message format 
passed between the application specific proxy back to 
the Dispatcher 26 (Figure 61 (b) ) . As shown in Figure 
61 (a) , all messages between the Dispatcher and the 
Proxies, in both directions, begin with a common 

45 header 14 0 to allow leverage of common code for 
processing the messages. A first portion of the 
header includes the protocol version 141 which may 
comprise a byte of data for identifying version 
control for the protocol, i.e., the message format 

50 itself, and is intended to prevent undesired 

mismatches in versions of the dispatcher and proxies. 
The next portion includes the message length 142 
which, preferably, is a 32 -bit integer providing the 
total length of the message including all headers. 

55 Next is the echo/ping flag portion 143 that is 
intended to support a connectivity test for the 
dispatcher-proxy connection. For example, when this 
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flag is non-zero, the proxy immediately replies with 
an echo of the supplied header. There should be no 
attempt to connect to processes outside the proxy, 
e.g. the back-end application services. The next 
5 portion indicates the Session key 144 which is the 
unique session key or "cookie" provided by the Web 
browser and used to uniquely identify the session at 
the browser. As described above, since the 
communications middleware is capable of supporting 

10 several types of transport mechanisms, the next 

portion of the common protocol header indicates the 
message type/mechanism 145 which may be one of four 
values indicating one of the following four message 
mechanisms and types: 1 } Synchronous transaction, e.g., 

15 a binary 0; 2) Asynchronous request, e.g., a binary 1; 

3) Asynchronous poll/reply, e.g., a binary 2; 4) bulk 
transfer, e.g., a binary 3. 

Additionally, the common protocol header 
section includes an indication of dispatcher - assigned 

20 serial number 146 that is unique across all dispatcher 
processes and needs to be coordinated across processes 
(like the Web cookie (see above)), and, further, is 
used to allow for failover and process migration and 
enable multiplexing control between the proxies and 

25 dispatcher, if desired. A field 147 indicates the 

status is unused in the request header but is used in 
the response header to indicate the success or failure 
of the requested transaction. More complete error 
data will be included in the specific error message 

30 returned. The status field 147 is included to 

maintain consistency between requests and replies. As 
shown in Figure 61(a), the proxy specific messages 14 8 
are the metadata message requests from the report 
requestor client and can be transmitted via 

35 synchronous, asynchronous or bulk transfer mechanisms. 
Likewise, the proxy specific responses are metadata 
response messages 149 again, capable of being 
transmitted via a synch, asynch or bulk transfer 
transport mechanism . 

40 It should be understood that the application 

server proxies can either reside on the dispatch 
server 26 itself, or, preferably, can be resident on 
the middle-tier application servers 30, i.e., the 
dispatcher front end code can locate proxies resident 

45 on other servers . 

As mentioned, the proxy validation process 
includes parsing incoming requests, analyzing them, 
and confirming that they include validly formatted 
messages for the service with acceptable parameters. 

50 If necessary, the message is translated into an 

underlying message or networking protocol. If no 
errors are found, the proxy then manages the 
communication with the middle- tier server to actually 
get the request serviced. The application proxy 

55 supports application specific translation and 

communication with the back-end application server for 
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both the Web Server (java applet originated) messages 
and application server messages. 

For example, in performing the verification, 
translation and communication functions, the Report 
5 Manager server, the Report Scheduler server and Inbox 
server proxies (Figure 10) each employ front end proxy 
C++ objects and components. For instance, a utils.c 
program and a C++ components library, is provided for 
implementing general functions/objects. Various C++ 

10 parser objects are invoked which are part of an object 
class used as a repository for the RM metadata and 
parses the string it receives. The class has a build 
member function which reads the string which contains 
the data to store. After a message is received, the 

15 parser object is created in the RMDispatcher . c object 
which is file containing the business logic for 
handling metadata messages at the back-end. It uses 
the services of an RMParser class. Upon determining 
that the client has sent a valid message, the 

20 appropriate member function is invoked to service the 
request. Invocation occurs in MCIRMServerSocket . C _ 
when an incoming message is received and is determined 
not to be a Talarian message. RMSErverSocket . c is a 
class implementing the message management feature in 

25 the Report Manager server. Public inheritance is from 
MCIServerSocket in order to create a specific instance 
of this object. This object is created in the main 
loop and is called when a message needs to be sent and 
received; a Socket. c class implementing client type 

30 sockets under Unix using, e.g., TCP/IP or TCP/UDP. 
Socket. C is inherited by ClientSocket .C : : 
Socket ( theSocketType, thePortNum) and ServerSocket . C : : 
Socket (theSocketType, thePortNum) when ClientSocket or 
ServerSocket is created. A ServerSocket . c class 

35 implements client type sockets under Unix using either 
TCP/IP or TCP/UDP. Server Socket . C is inherited by 
RMServerSocket when RMServerSocket is created. An 
InboxParser . c class used as a repository for the RM 
Metadata. The class' "build" member function reads 

40 the string which contains the data to store and the 

class parses the string it receives. After a message 
has been received, the MCIInboxParser object is 
created in inboxutl.c which is a file containing the 
functions which process the Inbox requests, i.e, Add, 

45 Delete, List, Fetch and Update. Additional 

objects/classes include: Environ. c which provides 
access to a UNIX environment; Process. c which provides 
a mechanism to spawn slave processes in the UNIX 
environment; Daemon. c for enabling a process to become 

50 a daemon; Exception. c for exception handling in C++ 

programs; and, RMlog.c for facilitating RM logging. In 
addition custom ESQL code for RM/database interface is 
provided which includes the ESQC C interface 
(Informix) stored procedures for performing the ARD, 

55 DRD, DUR, URS, GRD , CRD, and GPL messages. The 

functions call the stored procedures according to the 
message, and the response is build inside the 
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f unctions depending on the returned values ► of the 
stored procedures. A mainsql.c program provides the 
ESQL C interface for messages from the report manager 
and report viewer. 
5 Outgoing (server- to- client) communications 

follow the reverse route, i.e., the proxies feed 
responses to the decode/dispatch server 2 6 and 
communicate them to the DMZ Web servers 24 over the 
socket connection. The Web servers 2 6 will forward 
10 the information to the client 10 using SSL. The 

logical message format returned to the client from the 
middle tier service is shown as follows: 

| I TCP/IP | | encryption | | http | | web response | 
15 dispatcher response || proxy- specif ic response | 

where " || " separates a logical protocol level, and 
protocols nested from left to right. 

While the invention has been particularly shown 
20 and described with respect to preferred embodiments 

thereof, it will be understood by those skilled in the 
art that the foregoing and other changes in form and 
details may be made therein without departing from the 
spirit and scope of the invention. 

25 
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WHAT IS CLAIMED IS : 

1. An integrated and secure system for 
conducting business over the public Internet by 
5 enabling a customer of an enterprise communications 

network to command and control the customer's switched 
communications connections within the network over the 
public Internet and to view the results of any changes 
in the customer's connections over the public 
10 Internet, said system comprising: 

(a) an object oriented protocol for enabling 
encrypted interactive communications between said 
system and said customer over the public Internet, 
said protocol invoked within said customers web 

15 browser to support encryption, customer 

identification, authentication and network 
entitlements ; 

(b) at least one secure web server for 
managing secure customer sessions over the public 

20 Internet, said secure server providing session 

management for the customer connection, said session 
management including customer identification, 
validation, entitlements and encryption; 

(c) at least one dispatch server for 

25 communicating with said secure web server and a 

plurality of system resources, said dispatch server 
providing verification of system access and proxy 
generation for said system resources after said 
customer's entitlements have been verified; 

30 (d) said plurality of system resources 

including a network manager which manages the routing 
of the customer's traffic over the communications 
network, and a view application to review said network 
traffic, said network manager and said view 

35 application responsive to proxy requests from said 

dispatch server to enable the customer to command and 
control the communications network resources provided 
by the enterprise to the customer. 

1 2. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 1, wherein said switched 

4 communications connections further includes switched 

5 voice traffic and said network manager may command and 

6 control said switched voice traffic. 

1 3 . The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 2, wherein said switched voice 

4 traffic further includes switched toll free voice 

5 traffic and said network manager includes a toll free 

6 network manager application to command and control the 

7 routing of said switched voice traffic. 



1 

2 
3 



4. The integrated and secure system for 
conducting business over the public Internet as 
claimed in Claim 2, wherein said switched voice 
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4 traffic further includes switched call center voice 

5 traffic and said network manager includes a call 

6 manager application to command and control the routing 

7 of said switched voice traffic between call centers. 

1 5. The integrated and secure system for 

2 conducting business over-the public Internet as 

3 claimed in Claim 2, wherein said network manager 

4 includes an outbound network manager to command and 

5 control said switched toll traffic. 

1 6. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 1, wherein said switched 

4 communications connections further includes switched 

5 voice and data communications and said network manager 

6 may command and control said switched voice 

7 communications. 

1 7. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 1, wherein said switched 

4 communications connections further includes switched 

5 voice traffic and said view application includes a 

6 reporter for generating reports on the switched voice 

7 communications in said network traffic. 

1 8 . The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 7, wherein said reporter for 

4 generating reports on the switched voice 

5 communications in said network traffic includes a real 

6 time reporter for generating reports on said network 

7 traffic in near real time. 

1 9 . The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 7, wherein said reporter for 

4 generating reports on the switched voice 

5 communications in said network traffic includes a real 

6 time reporter for generating reports on outbound 

7 network traffic in near real time. 

1 10. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 7 , wherein said reporter for 

4 generating reports on the switched voice 

5 communications in said network traffic includes a 

6 reporter for generating history reports on said 

7 switched voice communications occurring during 

8 preselected periods of time. 

1 11. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 7, wherein said reporter for 

4 generating reports on the switched voice 

5 communications in said network traffic includes a 
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6 report manager application for enabling a customer to 

7 generate reports for a plurality of switched voice 

8 communication applications and an in -box manager 

9 application for communicating the reports to the 
10 customer. 

1 12. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 7, wherein said reporter for 

4 generating reports on the switched voice 

5 communications in said network traffic includes a 

6 priced call application for enabling a customer to 

7 generate priced reports and invoices for a plurality 

8 of switched voice communication applications. 

1 13. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 1, wherein said customer's switched 

4 communications connections includes switched data 

5 traffic and said view application to view said 

6 switched data traffic includes a broadband view 

7 application for generating reports on data relating to 

8 the switched data traffic. 

1 14 . The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 6, wherein said system includes an 

4 in-box application for storing and forwarding reports 

5 to the customer on data relating to the customer's 

6 switched voice and data traffic. 

1 15. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 1, wherein said system includes an 

4 event monitor application for storing and forwarding 

5 alarms generated with respect to the customer's 

6 traffic over the communications network. 

1 16. The integrated and secure system for 

2 conducting business over the public Internet by 

3 enabling a customer of an enterprise communications 

4 network to obtain and view reports over the public 

5 Internet relating to a plurality of services provided 

6 to the customer by the enterprise network, said system 

7 comprising: r . . 

8 ~ (a) an object oriented protocol for enabling 

9 encrypted interactive communications between said 

10 system and said customer over the public Internet, 

11 said protocol invoked within said customers web 

12 browser to support encryption, customer 

13 identification, authentication and report 

14 entitlements; 

15 (b) at least one secure web server for 

16 managing secure customer sessions over the public 

17 Internet, said secure server providing session 

18 management for the customer connection, said session 
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19 management including customer . identif icatipn, 

20 validation, report entitlements and encryption; 

21 (c) at least one dispatch server for 

22 communicating with said secure web server and a 

23 plurality of system resources, said dispatch server 

24 providing verification of system access and proxy 

25 generation for said reports after said customer's 

26 entitlements have been verified, each of said system 

27 resources maintaining data relating to separate 

28 communications network services provided to the 

29 customer by the enterprise; 

30 (d) a report requestor for enabling the 

31 customer to request reports from said plurality of 

32 system resources provided by the enterprise to the 

33 customer, a customer in-box for providing the reports 

34 to the customer, and a report viewer for presenting 

35 the reports to the customer, said report requestor, 

36 said customer in-box and said reort viewer responsive 

37 to proxy requests from said dispatch server to enable 

38 the customer to obtain and view reports from data 

39 maintained by a plurality of system resources ( from a 

40 single point of customer contact, identification and 

41 authentication . 

1 17. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 16, wherein said report requestor 

4 provides a single tool set for requesting and 

5 scheduling reports across a plurality of system 

6 resources, 

1 18. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 16, wherein said reports are 

4 historical reports on the customer's switched voice 

5 traffic. 

1 19. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 16, wherein said reports are priced 

4 call reports on the customer's switched communications 

5 connections. 

1 20. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 19, wherein said reports are invoices 

4 generated with respect t to the customer's switched 

5 communications connections. 

1 21. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 20, wherein said system further 

4 includes an electronic fund transfer application to 

5 enable payment of the invoices generated with respect 

6 to the customer's switched communications connections. 
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1 22. The integrated and secure system for 

2 conducting business over the public Internet by 

3 enabling a customer of an enterprise communications 

4 network to obtain event reports over the public 

5 Internet relating to a plurality of services provided 

6 to the customer by the enterprise network, said system 

7 comprising : ~ , 

8 (a) an object oriented protocol for enabling 

9 encrypted interactive communications between said 

10 system and said customer over the public Internet, 

11 said protocol invoked within said customers web 

12 browser to support encryption, customer 

13 identification, authentication and report 

14 entitlements; 

15 (b) at least one secure web server for 

16 managing secure customer sessions over the public 

17 Internet, said secure server providing session 

18 management for the customer connection, said session 

19 management including customer identification, 

20 validation, report entitlements and encryption; 

21 (c) at least one dispatch server for 

22 communicating with said secure web server and a 

23 plurality of system resources, said dispatch server 

24 providing verification of system access and proxy 

25 generation for said reports after said customer's 

26 entitlements have been verified, each of said system 

27 resources maintaining data relating to separate 

28 communications network services provided to the 

29 customer by the enterprise; 

30 (d) an event monitor application for enabling 

31 the customer to monitor a plurality of system 

32 resources provided by the enterprise to the customer, 

33 said event monitor application providing said customer 

34 with data necessary to make informed network 

35 management decisions with respect to said plurality of 

36 system resources from a single point of customer 

37 contact, identification and authentication. 

1 23. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 22, wherein said event monitor 

4 includes a report manager for requesting and 

5 scheduling reports on events occurring within the 

6 customers switched communication connections. 

1 24. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 22, wherein said event monitor 

4 includes a report manager for requesting and 

5 scheduling reports on events occurring within the 

6 customers switched data communication connections. 

1 25. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 22 wherein said event monitor 

4 provides customer access to a plurality of reports on 
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5 trouble tickets opened on events occurring* within the 

6 customers switched communication connections. 

1 26. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 22, wherein said system further 

4 includes a toll free network manager as one of said 

5 plurality of system resources, and said manager 

6 provides reports on the customers switched toll free 

7 voice connections. 

1 27. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 22, wherein said system further 

4 includes a call center manager as one of said 

5 plurality of system resources, and said call center 

6 manager provides reports on the customers switched 

7 call center connections. 

1 28. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 22, wherein said system further 

4 includes an out bound network manager as one of said 

5 plurality of system resources, and said outbound 

6 network manager providing reports on the customers 

7 outbound network calls. 

1 29. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 28, wherein said system further 

4 includes a single order entry application and an out 

5 bound network manager as two of said plurality of 

6 system resources, wherein said order entry application 

7 enables a customer to identify and authenticate a 

8 plurality of users with distinct call entitlements, 

9 and to modify said entitlements from a single point of 

10 customer identification and authentication, said 

11 outbound network manager providing modification of 

12 individual users entitlements for outbound network ( 

13 calls in response to entitlements determined by said 

14 order entry application. 

1 30. The integrated and secure system for 

2 conducting business over the public Internet by 

3 enabling a customer of an enterprise communications 

4 network to modify the customer's business relationship 

5 with the enterprise over the public Internet and to 

6 add, delete and modify services provided by the 

7 enterprise communications network to the customer, 

8 said system comprising: 

9 (a) an object oriented protocol for enabling 

10 encrypted interactive communications between said 

11 system and said customer over the public Internet, 

12 said protocol invoked within said customers web 

13 browser to support encryption, customer 

14 identification, authentication and network 

15 entitlements; 
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16 (b) at least one secure web serves for 

17 managing secure customer sessions over the public 

18 Internet, said secure server providing session 

19 management for the customer connection, said session 

20 management including customer identification, 

21 validation, entitlements and encryption; 

22 (c) at least one" dispatch server for 

23 communicating with said secure web server and a 

24 plurality of system resources, said dispatch server 

25 providing verification of system access and proxy 

26 generation for said interactive communications after 

27 said customer's entitlements have been verified; 

28 (d) said plurality of system resources 

29 including an order entry application which enables the 

30 customer to add, delete and modify services provided 

31 by the communications network to the customer, and to 

32 identify and authenticate a plurality of users with 

33 distinct call entitlements, and to modify said 

34 entitlements from a single point of customer 

35 identification and authentication, said order entry 

36 application responsive to proxy requests from said 

37 dispatch server to enable the customer to manage the 

38 communications network services provided by the 

39 enterprise to the customer. 

1 31. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 30, wherein said system further 

4 comprises an E-Billing application which enables 

5 electronic business transactions to pay for said _ 

6 services, said order entry and E-Billing applications 

7 responsive to proxy requests from said dispatch 

8 server to enable the customer to manage and pay for 

9 the communications network services provided by the 
10 enterprise. 

1 32. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 31, wherein said system further 

4 includes a client view application for generating 

5 historical reports of data relating to calls by 

6 customers users on said communications network. 

1 33. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 32, wherein said system enables 

4 invoice generation and electronic payment for pre- 

5 selected customer user calls over the public Internet. 

1 34. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 30, wherein said system further t 

4 includes a toll free network manager as one of said 

5 plurality of resources, and said order entry 

6 application enables a customer to identify and 

7 authenticate a plurality of users with distinct toll 

8 free call routing entitlements, and to modify said 



WO 99/15979 



PCT/US98/20170 



-189- 



9 toll free call routing entitlements from a> single 

10 point of customer identification and authentication. 

1 35. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 30, wherein said system further 

4 includes a call center manager application as one of 

5 said plurality of resources, and said order entry 

6 application enables a customer to identify and 

7 authenticate a plurality of users with distinct call 

8 center routing entitlements, and to modify said call 

9 center routing entitlements from a single point of 
10 customer identification and authentication. 

1 36. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 30, wherein said system further 

4 includes an event monitor application as one of said 

5 plurality of resources. 

1 37. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 36, wherein said system further 

4 includes a broadband view application for reporting on 

5 data communications connections, and said event 

6 monitor application reports alarm events occurring 

7 with respect said customers data communications 

8 connections. 

1 38. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 36, wherein said system further t 

4 includes a service inquiry application for managing 

5 trouble tickets generated with respect to said 

6 customers communications connections, and said order 

7 entry application allows modification of user 

8 entitlements with respect to said trouble tickets. 

1 39. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 30, wherein said system further 

4 includes a real time monitor application as one of 

5 said plurality of resources. 

1 40. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 31, wherein said system further 

4 includes a client view application for generating 

5 historical reports of data relating to calls by 

6 customers users on said communications network, and 

7 said E- Billing application enables electronic fund 

8 transfers for payment of said calls by said customer. 

1 41. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 40, wherein said system further 
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4 includes a priced reporting application for generating 

5 invoices for said calls. 

1 42. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 30, wherein said plurality of system 

4 resources includes a network manager which enables 

5 command and control of the customer's traffic over the 

6 enterprise communications network, and a viewing 

7 application to represent said network traffic, said 

8 network manager and said viewing application 

9 responsive to proxy requests from said dispatch server 

10 to enable the customer to command and control the 

11 communications network resources provided by the 

12 enterprise to the customer. 

1 43. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 42, wherein said customer's traffic 

4 further includes switched voice traffic and said 

5 network manager may command and control said switched 

6 voice traffic. 

1 44. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 43, wherein said switched voice 

4 traffic further includes switched toll free voice 

5 traffic and said network manager includes a toll free 

6 network manager application to command and control the 

7 routing of said switched voice traffic. 

1 45. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 43, wherein said switched voice _ 

4 traffic further includes switched call center voice 

5 traffic and said network manager includes a call 

6 manager application to command and control the routing 

7 of said switched voice traffic between call centers. 

1 46. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 43, wherein said switched voice 

4 traffic further includes switched toll voice traffic 

5 and said network manager includes an outbound network 

6 manager to command and control said switched toll 

7 traffic. 

1 47. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 42, wherein said customer's traffic t 

4 further includes switched data communications ( and said 

5 viewing application may view data representative of 

6 said switched data communications. 

1 48. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 42, wherein said customer's traffic 



WO 99/15979 



PCT/US98/20170 



-191- 



4 further includes switched voice traffic an£ said 

5 viewing application includes a reporter for generating 

6 reports on the switched voice communications in said 

7 network traffic. 

1 49. The integrated and secure system for 

2 conducting business over~the public Internet as 

3 claimed in Claim 48, wherein said reporter for 

4 generating reports on the switched voice traffic in 

5 said network traffic includes a real time reporter for 

6 generating, reports on said network traffic in near 

7 real time. 

1 50. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 48, wherein said reporter for 

4 generating reports on the switched voice traffic in 

5 said network traffic includes a reporter for 

6 generating history reports on said switched voice 

7 traffic occurring during preselected periods of time. 

1 51. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 48, wherein said reporter for 

4 generating reports on the switched voice 

5 communications in said network traffic includes a 

6 report manager application for enabling a customer to 

7 generate reports for a plurality of switched voice 

8 traffic applications and an in-box manager application 

9 for communicating the reports to the customer. 

1 52. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 48, wherein said reporter for 

4 generating reports on the switched voice traffic m 

5 said network traffic includes a priced call 

6 application for enabling a customer to generate priced 

7 reports and invoices for a plurality of switched voice 

8 traffic applications. 

1 53. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 47, wherein said viewing application 

4 to view said switched data communications includes a 

5 broadband view application for generating reports on 

6 data relating to the switched data communications. 

1 54. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 47, wherein said system further 

4 includes an in-box application for storing and 

5 forwarding reports to the customer on data relating to 

6 the customer's switched data communications. 

1 55. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 47, wherein said viewing application 
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5 electronic business transactions to pay for> said 

6 services, said order entry and E-Billing applications 

7 responsive to proxy requests from said dispatch 

8 server to enable the customer to manage and pay for 

9 the communications network services provided by the 
10 enterprise. 

1 59. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 56, wherein said system further 

4 includes a client view application for generating 

5 historical reports of data relating to calls by 

6 customers users on said communications network. 

1 60. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 56, wherein said system enables 

4 invoice generation and electronic payment for pre- 

5 selected customer user calls over the public Internet. 

1 61. The integrated and secure method for 

2 conducting business over the public Internet by 

3 enabling a customer of an enterprise communications 

4 network to command and control the customer's 

5 switched communications connections within the network 

6 over the public Internet and to monitor the results in 

7 near real time over the public Internet, said system 

8 comprising: 

9 (a) enabling interactive communications 

10 between said system and said customer over the public 

11 Internet with an object oriented protocol invoked from 

12 within said customer's web browser, said protocol 

13 supporting customer identification, authentication and 

14 a determination of network entitlements for the 

15 customer; 

16 (b) managing a plurality of customer sessions 

17 over the public Internet with a secure web server, 

18 said secure web server providing session encryption 

19 and management of the customer's session, said 

20 session management including the steps of 

21 identifying, validating, and determining the 

22 customer's entitlements within the network; 

23 (c) communicating with a plurality of system 

24 resources through dispatch server, said dispatch 

25 server communicating with said secure web server and 

26 providing verification of system access and proxy 

27 generation for said interactive communications after 

28 said customer's entitlements have been verified; 

29 (d) managing a plurality of enterprise system 

30 resources for the customer, said resources including a 

31 toll free network manager which manages the routing of 

32 the customer's toll free voice traffic over the 

33 communications network, and a real time monitor which 

34 provides near real time monitoring of network traffic; 

35 L (e) converting a customer request to modify a 

36 routing plan to a proxy request for said toll free 

37 network manager and providing near real time 
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5 electronic business transactions to pay foi~ said 

6 services, said order entry and E- Billing applications 

7 responsive to proxy requests from said dispatch 

8 server to enable the customer to manage and pay for 

9 the communications network services provided by the 
10 enterprise. 

1 59 . The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 56, wherein said system further 

4 includes a client view application for generating 

5 historical reports of data relating to calls by 

6 customers users on said communications network. 

1 60. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 56, wherein said system enables 

4 invoice generation and electronic payment for pre- 

5 selected customer user calls over the public Internet. 

1 61. The integrated and secure method for 

2 conducting business over the public Internet by 

3 enabling a customer of an enterprise communications 

4 network to command and control the customer's 

5 switched communications connections within the network 

6 over the public Internet and to monitor the results in 

7 near real time over the public Internet, said system 

8 comprising: 

9 (a) enabling interactive communications 

10 between said system and said customer over the public 

11 Internet with an object oriented protocol invoked from 

12 within said customer's web browser, said protoccpl 

13 supporting customer identification, authentication and 

14 a determination of network entitlements for the 

15 customer; 

16 (b) managing a plurality of customer sessions 

17 over the public Internet with a secure web server, 

18 said secure web server providing session encryption 

19 and management of the customer's session, said 

20 session management including the steps of 

21 identifying, validating, and determining the 

22 customer's entitlements within the network; 

23 (c) communicating with a plurality of system 

24 resources through dispatch server, said dispatch 

25 server communicating with said secure web server and 

26 providing verification of system access and proxy 

27 generation for said interactive communications after 

28 said customer's entitlements have been verified; 

29 (d) managing a plurality of enterprise system 

30 resources for the customer, said resources including a 

31 toll free network manager which manages the routing of 

32 the customer's toll free voice traffic over the 

33 communications network, and a real time monitor which 

34 provides near real time monitoring of network traffic; 

35 (e) converting a customer request to modify a 

36 routing plan to a proxy request for said toll free 

37 network manager and providing near real time 
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38 monitoring of the customers' s voice traffiq to enable 

39 the customer to manage the communications network 

40 resources provided by the enterprise to the customer 

41 in near real time. 

1 62. The integrated and secure method for 

2 conducting business over -the public Internet as 

3 claimed in Claim 61, wherein said method further 

4 includes entering customer orders through a single 

5 order entry point of authorization to enable the 

6 customer to identify and authenticate a plurality of 

7 users, with each user having distinct toll free call 

8 routing entitlements, and to modify said entitlements 

9 from said single point of customer identification and 
10 authentication . 

1 63 . The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 62, wherein said method further 

4 incudes enabling payment with an E- Billing 

5 application, said order entry and E-Billing 

6 applications responsive to proxy requests from said 

7 dispatch server to enable the customer to manage and 

8 pay for the communications network services provided 

9 by the enterprise. 

1 64. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 61, wherein said method further 

4 includes the step of generating historical reports of 

5 data relating to calls by customers users on said 

6 communications network with a client view application. 

1 65. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 61, wherein said method includes the 

4 step of generating electronic invoices and 

5 electronically transmitting funds to pay for pre- 

6 selected customer user calls. 

1 66. The integrated and secure method for 

2 conducting business over the public Internet which 

3 enables a customer of an enterprise communications 

4 network to modify the customer's business relationship 

5 with the enterprise over the public Internet and to 

6 add, delete and modify services provided by the 

7 enterprise communications network to the customer, 

8 said method comprising: 

9 (a) enabling encrypted interactive 

10 communications between said system and said customer 

11 over the public Internet with an object oriented 

12 protocol, said protocol invoked within said customers 

13 web browser to support encryption, customer 

14 identification, authentication and network 

15 entitlements; 

16 (b) managing secure customer sessions over 

17 the public Internet with at least one secure web 
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18 server, said secure server providing session 

19 management for the customer connection, said session 

20 management including customer identification, 

21 validation, entitlements and encryption; 

22 (c) communicating with said secure web server 

23 and a plurality of system resources with at least one 

24 dispatch server, said dis"patch server providing 

25 verification of system access and proxy generation for 

26 said interactive communications after said customer's 

27 entitlements have been verified; 

28 (d) providing a plurality of system resources 

29 for the customer, said plurality including an order 

30 entry application which enables the customer to add, 

31 delete and modify services provided by the 

32 communications network to the customer, and to 

33 identify and authenticate a plurality of users with 

34 distinct call entitlements, and to modify said 

35 entitlements from a single point of customer 

36 identification and authentication. 

1 67. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 66, wherein said method further 

4 comprises the step of enabling electronic payment for 

5 said plurality of system resources with an E-Billmg 

6 application, said order entry and E-Billing 

7 applications responsive to proxy requests from said 

8 dispatch server to enable the customer to 

9 electronically manage and pay for the communications 
10 network services provided by the enterprise. 

1 68. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 66, wherein said method further 

4 includes the step of generating historical reports of 

5 data relating to calls by customers users on said < 

6 communications network with a client view application. 

1 69. The integrated and secure system for 

2 conducting business over the public Internet as 

3 claimed in Claim 66, wherein said method further 

4 includes the steps of generating invoices and enabling 

5 electronic payment for pre- selected customer user 

6 calls over the public Internet. 

1 70. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 66, wherein said method further 

4 includes the step of providing a toll free network 

5 manager application as one of said plurality of system 

6 resources to enable the customer to change toll free 

7 routing entitlements from said single point of 

8 customer identification and authentication. 

1 71. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 66, wherein said method further 
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4 includes the step of providing managing calls to a 

5 call center with a call center manager application as 

6 one of said plurality of system resources, and said 

7 order entry application enabling a customer to 

8 identify and authenticate a plurality of users with 

9 distinct call center routing entitlements, and to 

10 modify said call center routing entitlements from said 

11 single point of customer identification and 

12 authentication. 

1 72. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 66, wherein said method further 

4 includes the step of providing an event monitor 

5 application as one of said plurality of system 

6 resources . 

1 73. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 72, wherein said method further 

4 includes the step of reporting on data communications 

5 connections with a broadband view application. 

1 74. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 66, wherein said method further 

4 includes the step of managing trouble tickets 

5 generated with respect to said customers 

6 communications connections with a service inquiry 

7 application, and said order entry application 

8 providing modification of user entitlements with 

9 respect to said trouble tickets from said single point 

10 of customer identification and authentication. 

1 75. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 66, wherein said method further 

4 includes the step of monitoring communications traffic 

5 utilized by the customer with a real time monitor 

6 application as one of said plurality of system 

7 resources. 

1 76. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 66, wherein said method further 

4 includes the step of generating historical reports of 

5 data relating to calls by customers users on said § 

6 communications network with a client view application. 

1 77. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 76, wherein said method further 

4 includes the step of generating invoices for said 

5 calls with a priced reporting application and enabling 

6 electronic fund transfers with for payment of said 

7 calls with an E-Billing application. 
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1 78. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 66, wherein said method includes the 

4 steps of providing a plurality of applications for the 

5 command and control of the customer's communications 

6 traffic over the enterprise communications network, 

7 and viewing said communications traffic with a 

8 reporting application. 

1 79. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 78, wherein said customer's 

4 communications traffic further includes switched voice 

5 traffic and a network manager application is provided 

6 for said command and control step. 

1 80. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 79, wherein said switched voice 

4 traffic further includes switched toll free voice 

5 traffic and said network manager includes a toll free 

6 network manager application to command and control the 

7 routing of said switched voice traffic. 

1 81. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 79, wherein said switched voice 

4 traffic further includes switched call center voice 

5 traffic and said network manager includes a call 

6 manager application to command and control the routing 

7 of said switched voice traffic between call centers. 

1 82. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 79, wherein said switched voice 

4 traffic further includes switched toll voice traffic 

5 and said network manager includes an outbound network 

6 manager to command and control said switched toll 

7 traffic. 

1 83. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 78, wherein said customer's 

4 communications traffic further includes switched data 

5 communications and said method includes the step of 

6 viewing data representative of said switched data 

7 communications. 

1 84. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 78, wherein said customer's 

4 communications traffic further includes switched voice 

5 traffic and said method further includes generating 

6 reports on the switched voice traffic with a report 

7 generator application. 
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1 85. The integrated and secure methpd for 

2 conducting business over the public Internet as 

3 claimed in Claim 84, wherein said step of generating 

4 reports on the switched voice traffic in said network 

5 traffic includes a real time reporter for generating 

6 reports on said network traffic in near real time. 

1 86. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 84, wherein said step of generating 

4 reports on the switched voice traffic in said network 

5 traffic includes a reporter for generating history 

6 reports on said switched voice traffic occurring 

7 during preselected periods of time. 

1 87 . The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 84, wherein said step of generating 

4 reports on the switched voice communications in said 

5 network traffic includes a report manager application 

6 for enabling a customer to generate reports for a 

7 plurality of switched voice traffic applications and 

8 the step of storing aid report with an in-box manager 

9 application which communicates the reports to the 
10 customer. 

1 88. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 84, wherein said step of generating 

4 reports on the switched voice traffic in said network 

5 traffic includes a priced call application for 

6 enabling a customer to generate priced reports and 

7 invoices for a plurality of switched voice traffic 

8 applications. 

1 89 . The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 83, wherein said step of viewing said 

4 switched data communications is conducted with a 

5 broadband view application which generates reports on 

6 data relating to the switched data communications. 

1 90. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 89, wherein said method further 

4 includes storing and forwarding reports to the % 

5 customer on data relating to the customer ' s _ switched 

6 data communications with an in-box application. 

1 91. The integrated and secure method for 

2 conducting business over the public Internet as 

3 claimed in Claim 90, wherein said viewing step 

4 includes storing and forwarding reports on alarm 

5 reports generated with respect to the customers 

6 switched data communications with an event monitor 

7 application. 
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92. An integrated and . secure system for 
conducting business over the public Internet by 
enabling a reseller of an enterprise communications 
services to brand those services as those of the 
reseller over the public Internet for resale to a 
third party customer, said system comprising: 

(a) an object oriented protocol for enabling 
encrypted interactive communications between said 
system and said third party customer over the public 
Internet, said protocol invoked within said third 
party customer's web browser to support encryption, 
third party customer identification, authentication 
and entitlements; 

(b) at least one secure web server for 
managing secure third party customer sessions over the 
public Internet, said secure server providing session 
management for the third party customer connection, 
said session management including third party customer 
identification, validation, entitlements and 
encryption; 

(c) at least one dispatch server for 
communicating with said secure web server and a 
plurality of system resources, said dispatch server 
providing verification of system access and proxy 
generation for said reports after said third party 
customer's entitlements have been verified, each of 
said system resources maintaining data relating to 
separate communications network services provided to 
the third party customer by the reseller of the 
enterprise resources ; 

(d) a plurality of applications for enabling 
access to said system resources, each application 
having a backplane class for invocation within the 
third party customer's web browser to manage one or 
more company brands that may be presented by the 
application to the web browser of the third party 
customer, one of said one or more company brands 
representing a brand adopted by said reseller of 
communications services, to enabling the reseller of 
communication services to represent said plurality of 
system resources as its own. 

93. The integrated and secure system for 
conducting business over the public Internet as 
claimed in Claim 16, wherein said reports are 
generated in real time with respect to the customer's 
switched communications connections by a real time 
monitor application. 

94. The integrated and secure system for 
conducting business over the public Internet as 
claimed in Claim 16, wherein said switched 
communications includes voice traffic, and said 
reports are generated in real time with respect to the 
customer's switched communications connections by a 
real time monitor application. 

95. The integrated and secure system for 
conducting business over the public Internet as 
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claimed in Claim 30, wherein said single point of 
customer contact provides a click and connect dial up 
connection to a customer service representative of the 
enterprise. 
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